Apache Log4j vulnerability

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
RIDS_I2MP
Posts: 751
Joined: Thu Mar 13, 2014 9:25 am

Apache Log4j vulnerability

Post by RIDS_I2MP »

Hi Team,

Can you let us know how to check if log4j is installed on our nagios servers?
OS is centos 7.9
Thanks & Regards,
I2MP Team.
User avatar
lmiltchev
Former Nagios Staff
Posts: 13587
Joined: Mon May 23, 2011 12:15 pm

Re: Apache Log4j vulnerability

Post by lmiltchev »

You can use:

Code: Select all

find /usr/local/ | grep -i log4
Having said that:
While Nagios Log Server does use Log4j components, and includes plugins for receiving Log4j data, we don’t believe the product is vulnerable at this time.
https://www.nagios.com/news/2021/12/upd ... erability/
Be sure to check out our Knowledgebase for helpful articles and solutions!
Locked