https://bugzilla.redhat.com/show_bug.cgi?id=2030932
--- Doc Text *updated* by Ted Jongseok Won <jwon(a)redhat.com> ---
A flaw was found in the Java logging library Apache Log4j 2 in versions from 2.0.0 and
before and including 2.14.1 which could allow a remote attacker to execute code on the
server if the system logs an attacker controlled string value with the attacker's JNDI
LDAP server lookup. The highest threat from the vulnerability is to data confidentiality
and integrity as well as system availability.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2030932