Trott / Log4jAttackSurface

Intro

Log4j impact manufacturers and components summary from the Internet community. Welcome everyone to submit mr to perfect the possible influence surface.

To be continued

Affect the components

Apache Solr

Apache Druid

Apache Flink

Apache Struts2

flume

dubbo

IBM Qradar SIEM

• /opt/qradar/support/mod_log4j.pl

• logging

PaloAlto Panorama

• logging

-Redis- (not a JAVA app)

Elastic

kafka

ghidra

PulseSecure

• KB44933 - CVE-2021-44228 - Java logging library (log4j)

UniFi

• UniFi Network Application 6.5.54

VMWare

• vCenter, vCloud

• kb.vmware.com/s/global-search/%40uri#q=Log4j

• VMware Response to CVE-2021-44228: Apache Log4j Remote Code Execution (87068)

A critical vulnerability in Apache Log4j identified by CVE-2021-44228 
has been disclosed that may allow for remote code execution.
VMware has classified this issue as critical and is working on 
publishing fixes and workarounds as a priority.