Log4j vulnerability threat impact on Elasticsearch and Logstash versions below 5

[warkolm (Mark Walkom)]

Those versions are EOL and unsupported, please upgrade as a matter of urgency.

Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31 has more info.