Log4J Shell attack

Discuss the Scalix Server software
Humph_rey
Posts: 3
Joined: Sun Jan 19, 2014 8:21 am

Log4J Shell attack

Postby Humph_rey » Mon Dec 13, 2021 6:13 am

Hi there,

is there a solution for scalix 12.8 ? we have log4j-2.11.1 in it.

regards

Humph_rey
Posts: 3
Joined: Sun Jan 19, 2014 8:21 am

Re: Log4J Shell attack

Postby Humph_rey » Mon Dec 13, 2021 6:24 am

is ist possible to do something like this:

zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class

17/12/21

By the way…, you can change log4j-api/jul/core to Version 2.17.0 . Ist works!


Return to “Scalix Server”



Who is online

Users browsing this forum: No registered users and 3 guests

cron