https://bugzilla.redhat.com/show_bug.cgi?id=2030932
--- Doc Text *updated* by Przemyslaw Roguski proguski@redhat.com --- A flaw was found in the Apache Log4j logging library in versions from 2.0.0 and before 2.15.0. A remote attacker who can control log messages or log message parameters, can execute arbitrary code on the server via JNDI LDAP endpoint.