BigFix Inventory SignaturesBigFix Inventory Signatures

Apache Log4j2 <= 2.14.1, 2.x
Log In or Register to download the signature, and more.


Description

search mechanism for *log4j-core-*.jar in version lower then 2.15

Property Details

PublisherApache Log4j2
Product NameApache Log4j2 <= 2.14.1
Software Release2.x
KeywordsApache Log4j2, CVE-2021-44228
Software UniqueId253fc420-5cfd-11ec-9d70-005056a848fd
Uploaded by on 12/14/2021 8:48:30 AM
Last modified by on 12/15/2021 3:27:07 AM
Counters 92 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Signature Content

<?xml version="1.0" encoding="utf-8"?>
<SoftwareIdentityCatalog exportTimeStamp="2021-12-15T11:07:22Z">
  <Software name="Apache Log4j2 &lt;= 2.14.1" vendor="Apache Log4j2" uniqueId="253fc420-5cfd-11ec-9d70-005056a848fd" version="2.x">
    <Signature uniqueId="24c87140-5cfd-11ec-9d70-005056a848fd" modified="2021-12-14T16:44:45Z" created="2021-12-14T16:44:45Z">
      <ExtendedSignature><![CDATA[<MultipleInstance><Iterator export="true" name="INSTALL_PATH"><FindFilePathEx appendFileName="true" name="log4j-core-*.jar"/></Iterator><Instance><Variable name="DETAILED_VER"><VectorToScalar><StringCrop endString=".jar" inputString="$(INSTALL_PATH)" seekFrom="left" startString="log4j-core-"/></VectorToScalar></Variable><Variable name="IS_INSTALLED"><Compare relation="lt" type="version"><StringSlice endIndex="4" inputString="$(DETAILED_VER)" startIndex="0"/><ValueOf value="2.15"/></Compare></Variable></Instance></MultipleInstance>]]></ExtendedSignature>
    </Signature>
  </Software>
</SoftwareIdentityCatalog>

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!
mmey -
Can these be updated to add 2.15/2.16?
FatScottishGuy -
This one doesn't want to import :*(
magdalena.kunat -
Updated content