Log4J vulnerability concerns

Question

Hi Team,

As there is a Log4J vulnerability trending recently. May I get clarifications for the below points.

1) How the Log4J vulnerability impacting my Windows hosts?

2) How can I prevent or take precautions from getting affected by Log4J?

3) Microsoft released any patches for mitigating this vulnerability?

4) does it affect any other applications released by Microsoft like MSSQL, SCCM or IIS etc.

Kindly provide the updates on this.

Answer 1

Hello @ABDUL SAHAD

You can find Microsoft official guide and statements here:

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/new-blog-post-microsoft-s-response-to-cve-2021-44228-apache/m-p/3037435

https://www.microsoft.com/security/blog/2021/12/11/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation/

Hope this helps with your query,

-----------

--If the reply is helpful, please Upvote and Accept as answer--