# Logstash 7.x Log4j CVE remediation on Windows server

**URL:** https://discuss.elastic.co/t/logstash-7-x-log4j-cve-remediation-on-windows-server/343374
**Category:** Logstash
**Tags:** docker
**Created:** [September 19, 2023, 2:22pm UTC](https://discuss.elastic.co/t/logstash-7-x-log4j-cve-remediation-on-windows-server/343374 "2023-09-19T14:22:03Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![newschapmj1](https://avatars.discourse-cdn.com/v4/letter/n/dbc845/32.png) [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)
#### Post date: [September 19, 2023, 2:22pm UTC](https://discuss.elastic.co/t/logstash-7-x-log4j-cve-remediation-on-windows-server/343374/1 "2023-09-19T14:22:04Z")

</div>

Logstash 7.x Log4j Windows script

> [@Logstash 5.0.0-6.8.20 and 7.0.0-7.16.0: Log4j CVE-2021-44228, CVE-2021-45046 remediation](https://discuss.elastic.co/t/logstash-5-0-0-6-8-20-and-7-0-0-7-16-0-log4j-cve-2021-44228-cve-2021-45046-remediation/292343):
>
> Note — These instructions only apply if you are running Logstash 5.0.0 - 6.8.20, or 7.0.0 - 7.16.0. If you are running an older version of Logstash, or a version of Logstash \>= 6.8.21 in the 6.x series or \>= 7.16.1 in the 7.x series, these instructions do not apply. Please follow the guidance in [main announcement](https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476)Instructions for removing JndiLookup from relevant JAR files​ These instructions only apply to users running Logstash versions between 5.0.0 and 6.8.20 (inclusive) or between 7.0.0 a…

Contains Linux and MacOs Installations and Docker.  
Has anyone got the same script/steps for Windows server?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 17, 2023, 2:23pm UTC](https://discuss.elastic.co/t/logstash-7-x-log4j-cve-remediation-on-windows-server/343374/2 "2023-10-17T14:23:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
