{"id":4002,"date":"2021-12-21T10:29:52","date_gmt":"2021-12-21T02:29:52","guid":{"rendered":"https:\/\/www.udshk.com\/?post_type=news&p=4002"},"modified":"2021-12-24T11:22:47","modified_gmt":"2021-12-24T03:22:47","slug":"log4j-vulnerability-and-it-security-vendors-responses","status":"publish","type":"news","link":"https:\/\/www.udshk.com\/?news=log4j-vulnerability-and-it-security-vendors-responses","title":{"rendered":"Log4j Vulnerability and IT Security Vendors\u2019 Responses"},"content":{"rendered":"\n

What is the Log4j Vulnerability?<\/strong><\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

A flaw in widely used internet software known as Log4j has left companies and government officials scrambling to respond to a glaring cybersecurity threat to global computer networks.<\/p>\n\n\n\n

The bug disclosed last week could enable potentially devastating cyberattacks that span economic sectors and international borders, according to security experts.<\/p>\n\n\n\n

U.S. officials say that hundreds of millions of devices are at risk, while researchers and major technology companies warn that hackers linked to foreign governments and criminal ransomware groups are already probing how to exploit the vulnerability within targets\u2019 computer systems.<\/p>\n\n\n\n

CISA (Cybersecurity and Infrastructure Security Agency) published an open-sourced log4j-scanner derived from scanners created by other members of the open-source community on 12\/22\/2021. This tool is intended to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities. This repository provides a scanning solution for the log4j Remote Code Execution vulnerabilities (CVE-2021-44228 & CVE-2021-45046).<\/p>\n\n\n\n

CISA Log4j Scanner Download:<\/p>\n\n\n\n

https:\/\/github.com\/cisagov\/log4j-scanner<\/a><\/p>\n\n\n\n

What is Log4j?<\/strong><\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Software developers use the Log4j framework to record user activity and the behavior of applications for subsequent review. Distributed free by the nonprofit Apache Software Foundation, Log4j has been downloaded millions of times and is among the most widely used tools to collect information across corporate computer networks, websites and applications. The software is maintained by Apache volunteers.<\/p>\n\n\n\n

How can hackers take advantage of Log4j\u2019s vulnerability?<\/strong><\/p>\n\n\n\n

The Log4j flaw, disclosed by Apache on , allows attackers to execute code remotely on a target computer, meaning that they can steal data, install malware or take control. Some cybercriminals have installed software that uses a hacked system to mine cryptocurrency, while others have developed malware that allows attackers to hijack computers for large-scale assaults on internet infrastructure.<\/p>\n\n\n\n

Security experts are particularly concerned that the vulnerability may give hackers enough of a foothold within a system to install ransomware, a type of computer virus that locks up data and systems until the attackers are paid by victims. Security company F-Secure Oyisaid its analysts have observed some ransomware variants being deployed via the flaw already, along with malware that is often deployed as a precursor to a ransomware strike.<\/p>\n\n\n\n

The above information is retrieved from the WALL STREET JOUNRNAL<\/em>. For further information, please go to <\/em>https:\/\/www.wsj.com\/articles\/what-is-the-log4j-vulnerability-11639446180<\/a><\/p>\n\n\n\n

\n
\n

2 CVEs for the Log4j vulnerabilities disclosed by Apache<\/strong><\/p>\n<\/div>\n<\/div>\n\n\n\n

<\/th>Security Vulnerability CVE-2021-44228<\/th>Security Vulnerability CVE-2021-45046<\/th><\/tr><\/thead>
Addressed in <\/strong><\/td>Log4j 2.12.2 and Log4j 2.16.0<\/td>Log4j 2.12.2 for Java 7 and 2.16.0 for Java 8 and up<\/td><\/tr>
Summary<\/strong><\/td>Log4j\u2019s JNDI support has not restricted what names could be resolved. Some protocols are unsafe or can allow remote code execution.<\/td>Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

The above information is retrieved from Apache official website. For further information, please go to <\/em>https:\/\/logging.apache.org\/log4j\/2.x\/security.html<\/a><\/p>\n\n\n\n

How IT Security Vendors handle the Log4j Vulnerabilities?<\/strong><\/p>\n\n\n\n

Many IT Security Vendors have traced attempted attacks that exploit the this vulnerabilities. Each has released the security patch or signatures and provide the recommendation on how to against this attack to protect their customer business.<\/p>\n\n\n\n

Please click on the Vendors\u2019 logo for further information on their responses.<\/strong><\/p>\n\n\n\n

\n
\n
\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n<\/div>\n\n\n\n
\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n<\/div>\n\n\n\n
\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

For further enquiries on Log4j, please contact our consultants (info@udshk.com). <\/p>\n","protected":false},"excerpt":{"rendered":"

What is the Log4j Vulnerability? A flaw in widely used internet software known as Log4j has left companies and government officials scrambling to respond to a glaring cybersecurity threat to global computer networks. The bug disclosed last week could enable potentially devastating cyberattacks that span economic sectors and international borders, according to security experts. U.S. […]<\/p>\n","protected":false},"author":1,"featured_media":4164,"comment_status":"closed","ping_status":"closed","template":"","tags":[],"news-category":[],"class_list":["post-4002","news","type-news","status-publish","has-post-thumbnail","hentry","entry","has-media","owp-thumbs-layout-horizontal","owp-btn-normal","owp-tabs-layout-horizontal","has-no-thumbnails","has-product-nav"],"_links":{"self":[{"href":"https:\/\/www.udshk.com\/index.php?rest_route=\/wp\/v2\/news\/4002","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.udshk.com\/index.php?rest_route=\/wp\/v2\/news"}],"about":[{"href":"https:\/\/www.udshk.com\/index.php?rest_route=\/wp\/v2\/types\/news"}],"author":[{"embeddable":true,"href":"https:\/\/www.udshk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.udshk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4002"}],"version-history":[{"count":0,"href":"https:\/\/www.udshk.com\/index.php?rest_route=\/wp\/v2\/news\/4002\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.udshk.com\/index.php?rest_route=\/wp\/v2\/media\/4164"}],"wp:attachment":[{"href":"https:\/\/www.udshk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4002"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.udshk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4002"},{"taxonomy":"news-category","embeddable":true,"href":"https:\/\/www.udshk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fnews-category&post=4002"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}