log4fix

log4fix This tool is to detect and fix the log4j log4shell vulnerability CVE-2021-44228 by looking and removing the JndiLookup class from .jar/.war/.ear files with zero dependencies for free. This tool has been tested on: - Linux 32bit and 64 bit - Windows 32 bit and 64 bit - OpenBSD 64 bit This...

log4j-remediation

sakurajilog4j This tool is used to discover and remedidate the Log4Shell vulnerability CVE-2021-45105 by removing the 'JndiLookup.class' file from '.ear|.jar|.war' files on Windows, Linux & Mac OS. Usage: Scan OS for Log4Shell vulnerability. - sakurajilog4j discover - Example:...

Fix-CVE-2021-44228

CVE-2021-44228! The current program remove the class "org/apache/logging/log4j/core/lookup/JndiLookup.class" from your zip, jar, war, ear archive. Before use Follow the guide https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide/ before using. The utility will help your to apply "Modif...

CVE-2021-44228-Scanner

log4j2-scan is a single binary command-line tool for CVE-2021-44228 vulnerability scanning and mitigation patch. It also supports nested JAR file scanning and patch. Download log4j2-scan 1.3.1 Windows x64 If native executable doesn't work, use the JAR instead. 32bit is not supported. log4j2-scan...

log4j-patched

Log4J Patched Dependency for Log4Shell This repository aims to provide a patched version of the Log4J library for legacy system that can not be updated right away. The patch consist in a modified version of the log4j-core.x.x.x.jar file following the official recommandation of the Apache...

CVE-2021-44228

Log4Shell CVE-2021-44228 Mitigation Ansible Role This Ansible role deploys a Python-based script to programmatically mitigate the Log4Shell vulnerability CVE-2021-44228 by removing the vulnerable JndiLookup class from affected Log4j JAR files. It is designed to be run via Ansible, but you can als...

CVE-2021-4125

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed. This CVE only applies to the OpenShift Metering hive container images, shipped in OpenShift 4.8, 4.7 and 4.6...

Logstash 5.0.0-6.8.20 and 7.0.0-7.16.0: Log4j CVE-2021-44228, CVE-2021-45046 remediation

Note — These instructions only apply if you are running Logstash 5.0.0 - 6.8.20, or 7.0.0 - 7.16.0. If you are running an older version of Logstash, or a version of Logstash = 6.8.21 in the 6.x series or = 7.16.1 in the 7.x series, these instructions do not apply. Please follow the guidance in ma...