As the title states, is Elasticsearch vulnerable for the new Log4j vulnerability CVE-2021-44832 ? This is a new vulnerability of which the details were released a few hours ago. Or is this prevented by the security manager?

Log4j CVE-2021-44832 (released 28th dec) - is ES vulnerable?

Neil_A_Chikode (Neil A Chikode) January 5, 2022, 8:38pm 8

When will Elastic 7.16.3 with Log4j 2.17.1 be released?

2 Likes

Topic		Replies	Views
Log4j on Elasticsearch 7.9.2 Elasticsearch	9	3587	February 14, 2022
How do I Mitigate LOG4J CVE on Elasticsearch 7.4.0? Elasticsearch	3	657	January 4, 2023
Does Log4j vulnerability (CVE-2021-44228) is impacted for ES v7.5.2? Elasticsearch	2	1305	January 17, 2022
Regarding log4j vulnerability Elasticsearch docker	5	6516	February 2, 2022
Is Elasticsearch affected by CVE-2021-45046 - a second vulnerability in log4j? Elasticsearch	2	6007	January 12, 2022