Beats are not vulnerable to Log4j2 RCE

Elastic Stack Beats
1

Hi there, maybe some can confirm the follow for us. A few days ago we read this article concerning the log4j vulnerability.

Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31

Here it is stated that BEATS is not affected by this vulnerability. But just to be sure, cause we are still running on version 7.9.0, don't ask why :wink: is our version safe from the log4j? as we cannot upgrade.

Thank you very much.
Regards,
Dave

2

Beats are written in GoLang not java.

3

Thanks Alex for the very fast reply! Good to hear it's not affected, so we can proceed calmly :nerd_face:

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.