Cloud Foundry Advisory Board Call, Dec 2021: The Log4j Vulnerability
The vulnerability led to malicious remote code execution in some environments and local code execution in all the environments.
The final Cloud Foundry Community Advisory Board (CAB) meeting for 2021 featured a few updates from the foundation and an overview of the recent Log4j vulnerability. The call was moderated by Ram Iyengar from the CF Foundation.
Log4j’s exposure to data leak
On Friday, December 10, 2021, a critical vulnerability in Apache Log4j identified by CVE-2021–44228 was publicly disclosed. Log4j is a library that is widely adopted as a logging framework for Java. Log4j versions prior to 2.16.0 were subject to a remote code vulnerability via the LDAP JNDI parser, resulting in information leak and remote code execution in some environments and local code execution in all the environments.
For details, please check out our meeting notes.
