3 ms·
If I'm not wrong this vulnerability affects Log4j 2.x onwards and the latest EJBCA from https://github.com/primekeydevs/ejbca-ce https://github.com/primekeydevs
by hablutzel1 5y ago
If I'm not wrong this vulnerability affects Log4j 2.x onwards and the latest EJBCA from https://github.com/primekeydevs/ejbca-ce https://github.com/primekeydevs/ejbca-ce appears to be using only Log4j 1.2.17.
- karansachdeva24 5y agoHow did you confirm the log4j version?
- hablutzel1 5y agoLook at the the Log4j version under https://github.com/primekeydevs/ejbca-ce/tree/main/lib https://github.com/primekeydevs/ejbca-ce/tree/main/lib.
- maurom 5y agoIndeed, there's no sight of log4j2 on EJBCA Community deployments