3 ms·
What about desktop application vulnerabilities? There are quite a few applications built with java, which include log4j.
by jbverschoor 5y ago
What about desktop application vulnerabilities? There are quite a few applications built with java, which include log4j.
- lostmsu 5y agoJetBrains IDEs are probably affected.
- stuff4ben 5y agoWhy would you even call that out when you don't know? Just because it uses Java does NOT mean it uses log4j. None of Jetbrains IDEs are affected btw.
- formerly_proven 5y agoThey contain (among many other things) a log4j copy with the vulnerability, so saying they might be affected isn't unreasonable.
- maccard 5y agoNo, it is unreasonable. It's baseless speculation, which is easily disproven [0] [0] https://intellij-support.jetbrains.com/hc/en-us/community/posts/4412295099026 https://intellij-support.jetbrains.com/hc/en-us/community/po...
- wingmanjd 5y agoGraylog was affected. Patched soon after the notice went public and not even a handful of hours later I saw some hits on the public web docker runner. Feel like we just barely dodged this one.
- srcreigh 5y agoThey are listed. Biggest one is probably the Minecraft client > Minecraft users were using it to execute programs on the computers of other users by pasting a short message in a chat box. https://www.ctvnews.ca/sci-tech/the-internet-s-on-fire-as-techs-race-to-fix-software-flaw-1.5703123 https://www.ctvnews.ca/sci-tech/the-internet-s-on-fire-as-te... Last night, we kept getting disconnected from HyPixel on Minecraft 18.1 client. I wonder if they check for the vulnerability and boots people? Although 18.1 should be fixed. When we added the log4j JVM flag mitigation, we stopped getting booted.