Zero-day-exploit in log4j2 which is part of elasticsearch

sandeepkanabar (Sandeep Kanabar) December 15, 2021, 9:55am 69

Yes. They are. Their advisory does mention it at the very top.

1 Like

Topic		Replies	Views
Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31 Security Announcements	7	351606	November 4, 2022
CVE-2021-44228 aka log4shell is logstash and/or elasticsearch affected? Logstash	15	13848	January 12, 2022
Elasticsearch wont start on Ubuntu 14.04 Elasticsearch	10	1042	July 6, 2017
Elasticsearch 5.0.0-5.6.10 and 6.0.0-6.3.2: Log4j CVE-2021-44228, CVE-2021-45046 remediation Security Announcements	1	33009	November 4, 2022
Regarding log4j vulnerability Elasticsearch docker	5	6514	February 2, 2022