Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Kiwi R3 2021 - Log4j vulnerability verification and correction

Description

The 'formatMsgNoLookups' property was added in version 2.10.0, per the JIRA Issue LOG4J2-2109 that proposed it. Therefore the 'formatMsgNoLookups=true' mitigation strategy is available in version 2.10.0 and higher, but is no longer necessary with version 2.15.0, because it then becomes the default behavior .

Other comments:

mod-ldp doesn't use log4j

Environment

None

Potential Workaround

None

Checklist

hide

TestRail: Results

Activity

Show:

Charlotte Whitt December 14, 2021 at 6:56 PM

Duplicate

Details

Assignee

Reporter

Labels

Priority

Development Team

Thor

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs
Created December 14, 2021 at 4:50 PM
Updated December 14, 2021 at 6:56 PM
Resolved December 14, 2021 at 6:56 PM
Configure
TestRail: Cases
TestRail: Runs

Flag notifications