Apache LOG4J

البوست دا مهم جدا للجميع ،، بنسبه ٩٩.٩٩٩٩٩٪؜

هتحتاجه☠️💀☠️

في Vulnerability ☠️ تم الاعلان عنها خاص ب Apache Log4j
في برمجيات و منتجات كتير من شركات مختلفه علي مستوي العالم تعتمد بشكل كبير جدا علي Apache Log4j

ال Vulnerability اخذت كود (CVE-2021-44228)
و درجه الخطوره ١٠/١٠
ومن خلالها تقدر تعمل remote code execution

بالنسبه لمنتجات VMware ففي برودكت كتير اتاثرت ، لو عندك اي برودكت من اللي تحت فلازم تتبع ال workarounds المتاحه حاليا لحين اصدار تحديثات جديده

VMware Horizon
VMware vCenter Server
VMware HCX
VMware NSX-T Data Center
VMware Unified Access Gateway
VMware WorkspaceOne Access
VMware Identity Manager
VMware vRealize Operations
VMware vRealize Operations Cloud Proxy
VMware vRealize Log Insight
VMware vRealize Automation
VMware vRealize Lifecycle Manager
VMware Telco Cloud Automation
VMware Site Recovery Manager
VMware Carbon Black Cloud Workload Appliance
VMware Carbon Black EDR Server
VMware Tanzu GemFire
VMware Tanzu Greenplum
VMware Tanzu Operations Manager
VMware Tanzu Application Service for VMs
VMware Tanzu Kubernetes Grid Integrated Edition
VMware Tanzu Observability by Wavefront Nozzle
Healthwatch for Tanzu Application Service
Spring Cloud Services for VMware Tanzu
Spring Cloud Gateway for VMware Tanzu
Spring Cloud Gateway for Kubernetes
API Portal for VMware Tanzu
Single Sign-On for VMware Tanzu Application Service
App Metrics
VMware vCenter Cloud Gateway
VMware Tanzu SQL with MySQL for VMs
VMware vRealize Orchestrator
VMware Cloud Foundation
VMware Workspace ONE Access Connector
VMware Horizon DaaS
VMware Horizon Cloud Connector

تقدر من خلال اللينك دا تقفل ال
Vulnerability

Standard

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.