A vulnerability in Log4j, a very popular Java-based logging tool, has been weaponized. The threat is impacting millions.
ALISO VIEJO, Calif. - Dec. 14, 2021 - PRLog -- Syxsense, a global leader in IT and endpoint security management, announced the ability to scan for Log4j using Syxsense Secure, identifying endpoints that are exposed to this new vulnerability.
"Although a number of popular IT management and security tools are vulnerable, Syxsense is pleased to confirm that it does NOT use Log4j," commented Ashley Leonard, CEO of Syxsense. "It imperative that IT departments respond quickly to this new threat by scanning their environment and identifying exposed endpoints."
A vulnerability in Log4j which is a very popular Java-based logging tool has been weaponized. All versions of Log4j prior to 2.14.1 are vulnerable, this does not just impact the stand-alone installer. Any application which uses Log4j for log file management or LDAP queries could also be vulnerable, unfortunately where this is the case, the vendor must provide updates for those 3rd party updates.
The Scope metric captures whether a vulnerability in one vulnerable component impacts resources in components beyond its security scope.
What makes this extra serious, is that the Scope (also known as a Jump Point) is Changed – meaning that exploitation of this vulnerability could allow the attacked to affect resources beyond the security scope managed by the security authority of the vulnerable component.
CVE-2021-44228 – CVSS Score: 10
Syxsense Risk Alert
- Attack Vector: Any Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope (Jump Point): Yes
If a business is uncertain of the prevalence of Log4j in their environment, or worried about the presence of Log4j in their scanning tools, be assured that Syxsense Secure does not use the logging tool with the vulnerability in it. Businesses can download the Syxsense scanning tool and use it to run free scans of all the hard drives in their environment for 14 days at no cost. Syxsense is also waiving the 100-device limit of our free trial for a limited time to ensure businesses can run a complete diagnostic scan in their environment.
To run a scan, please visit: https://www.syxsense.com/log4j-secure-trial
About Syxsense
Syxsense is the leading provider of innovative, intuitive technology that sees all and knows everything about every endpoint, in every location, everywhere inside and outside the network, as well as in the cloud. It combines the power of artificial intelligence with industry expertise to manage and secure endpoints by stopping threats before they occur and neutralizing threats when they happen. The Syxsense Endpoint Security Cloud always-on technology performs in real-time so businesses can operate free of disruption from security breaches that cripple productivity and expose them to financial risk and reputational harm. www.syxsense.com
Contact
Heidi Smith
Syxsense
***@syxsense.com
Photos: (Click photo to enlarge)
Read Full Story - Syxsense Releases Steps for Businesses to Protect Themselves Against the Log4j Vulnerability | More news from this source
Press release distribution by PRLog
