Hello, We have log4j vulnerabilities for Elasticsearch and Logstash in the following paths: Path : /usr/share/Elasticsearch/lib/log4j-core-2.11.1.jar Path : /usr/share/logstash/logstash-core/lib/jars/log4j-core-2.14.0.jar Is there a workaround to fix the vulnerabilities? Otherwise, Is the only s…

Elasticsearch&Logstash Log4j Vulnerabilities

kyarali (kyarali) May 16, 2022, 3:19am 4

Hello

Thanks for your updates. The link you provided for me is about Logstash. Is there a solution for Elasticsearch too?

Thanks

Topic		Replies	Views
Log4j vulnerability threat impact on Elasticsearch and Logstash versions below 5 Elasticsearch	2	1274	January 16, 2022
Urgent - Incomplete fix for Apache Log4j vulnerability v2.15.0 Logstash	3	3575	January 19, 2022
Log4j2 vulnerability mitigation Logstash	7	1736	July 3, 2023
CVE-2021-44228 aka log4shell is logstash and/or elasticsearch affected? Logstash	15	13848	January 12, 2022
Log4j vulnerability threat impact on Elasticsearch 2.3.4 and Logstash 2.3.4 Elastic Security	2	843	December 20, 2021