Stay updated with breaking news from Apache Foundation. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Yesterday the Apache Foundation released an emergency update for a critical zero-day vulnerability in Log4j, a ubiquitous logging tool included in almost every Java application. The issue has been named Log4Shell and received the identifier CVE-2021-44228. The problem revolves around a bug in the Log4j library that can allow an attacker to execute arbitrary code […]
Millions of applications use vulnerable Java logging library.
A zero-day exploit began to make noise in Java. Apache Foundation created Log4j. The Log4j vulnerability was first detected in Minecraft and is now listed as CVE-2021-44228.
A bug in the ubiquitous Log4j library can allow an attacker to execute arbitrary code on any system that uses Log4j to write logs. Does yours?
A remote code execution vulnerability in Log4j presents a bigger threat to organizations than even the infamous 2017 Apache Struts vulnerability that felled Equifax, they say.