Elasticsearch-oss:6.6.2 Java Security Manager enabled by default?

Elastic Stack Elasticsearch
1

Hello, I'm trying to verify that Java Security Manager is enabled by default in oss images, particularly in:

I see conflicting information online about whether it's always enabled or not. How can we verify?

Thank you,
Travis

2

Welcome to our community! :smiley:

Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31 has a bunch of info on the impacted versions.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.