Log4Shell works by abusing a feature in Log4j that allows users to specify custom code for formatting a log message. For example, in the online game Minecraft, Log4j is used by the server to log activity like total memory used and user commands typed into the console. Similar diagnostic messages are used throughout software applications. It also records that event in a log for the server’s system administrators using Log4j. The web server running the domain of the web link you tried to get to tells you that there’s no such webpage. It’s open-source software provided by the Apache Software Foundation.Ī common example of Log4j at work is when you type in or click on a bad web link and get a 404 error message. Log4j records events – errors and routine system operations – and communicates diagnostic messages about them to system administrators and users. Cybersecurity & Infrastructure Security Agency director Jen Easterly called Log4Shell ‘the most serious vulnerability I’ve seen.’ Kevin Dietsch/Getty Images News What does Log4j do?
0 kommentar(er)
