Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31

Levine · January 6, 2022, 2:06am

ESA-2021-31 Advisory Updated

Dec 22, 2021 - 20:30 UTC - APM Java Agent updates available with log4j 2.12.3
Jan 6, 2022 - 01:20 UTC - Update with responses for CVE-2021-44832. APM Java Agents 1.26.2 and 1.28.4 release. ECE 2.12.4 release. Planned release for Elasticsearch, Logstash 7.16.3 and 6.8.23

Topic		Replies	Views
Zero-day-exploit in log4j2 which is part of elasticsearch Elasticsearch	94	64925	January 20, 2022
CVE-2021-44228 aka log4shell is logstash and/or elasticsearch affected? Logstash	15	13806	January 12, 2022
Log4j2 vulnerability mitigation Logstash	7	1681	July 3, 2023
When will the next patch be released for Elasticsearch Elasticsearch	8	1664	January 17, 2022
Log4j CVE-2021-44832 (released 28th dec) - is ES vulnerable? Elasticsearch	10	6781	February 7, 2022