Hi, I am using the below ELK stack versions. Might be old version. I would like to know whether these versions of ELK are vulnerable due to the log4j2 issue. Elasticsearch-2.3.3 logstash-2.3.1 kibana-4.5.1 I couldn't find any proper solution for the above mentioned versions. If this is vulnerab…

Mitigation for Log4j2 vulnerability

TimV (Tim Vernum) December 16, 2021, 1:21am 5

It includes a list of Elastic products and the affected versions.

2 Likes

Topic		Replies	Views
Regarding log4j vulnerability Elasticsearch docker	5	6438	February 2, 2022
Log4j2 vulnerability mitigation - JndiLookup Removal Logstash	2	325	July 4, 2023
Zero-day-exploit in log4j2 which is part of elasticsearch Elasticsearch	94	64613	January 20, 2022
Apache Log4j 2.0 < 2.3.2 / 2.4 < 2.12.4 / 2.13 < 2.17.1 RCE Elasticsearch	7	551	February 17, 2023
CVE-2021-45046 : Incomplete fix for Apache Log4j vulnerability Logstash	2	5766	January 12, 2022