# Log4j Vulnerability Elasticsearch 7.8.0

**URL:** https://discuss.elastic.co/t/log4j-vulnerability-elasticsearch-7-8-0/333035
**Category:** Elasticsearch
**Created:** [May 10, 2023, 7:42am UTC](https://discuss.elastic.co/t/log4j-vulnerability-elasticsearch-7-8-0/333035 "2023-05-10T07:42:25Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![mikewillis](https://avatars.discourse-cdn.com/v4/letter/m/b2d939/32.png) [@mikewillis](https://discuss.elastic.co/u/mikewillis)
#### Post date: [May 10, 2023, 8:48am UTC](https://discuss.elastic.co/t/log4j-vulnerability-elasticsearch-7-8-0/333035/2 "2023-05-10T08:48:39Z")

</div>

> [@Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31](https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476):
>
> Subject: Apache Log4j2 Vulnerability - CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-44832 - ESA-2021-31 ​​Note - We will update this announcement with new details as they emerge from our analysis. Please check back periodically. Update Log Dec 16, 2021 - 04:20 UTC - Update Summary: ECK 1.9 released which automatically adds the JVM option to impacted Elasticsearch clusters managed by ECK. Dec 17, 2021 - 23:50 UTC - Update latest release of APM Java Agent to 1.28.2. Statement of pl…

Search for "Elasticsearch announcement (ESA-2021-31)". There's information about how to mitigate by setting `-Dlog4j2.formatMsgNoLookups=true`

---

_[View the full topic](https://discuss.elastic.co/t/log4j-vulnerability-elasticsearch-7-8-0/333035)._