???? ????????, ???????????? ???????
Log4j
???
??????
??? ????
??????
Java
, ??? ??????
??? ?????? ????'?
, ?????? ??????
????? ???
.
???? ?????? ?? ??????? ????? ?? ??? Ceki Gulcu. ????? ????? ???? Log4j 2, ?????
????? ?????
????? 1. ??????? 2015 ????? ????? ??????? ???? 1 ????? ?????? ?? ?????? ????? 2.
[1]
Gulcu ??? ??? ??
SLF4J
, Reload4j ?-Logback ??? ?????? ?-Log4j.
??? ????? ?
Log4Shell
?-9 ?????? 2021 ????? ??? ????? ??
???? ?????
?????
[2]
???????, ??????? ????? ?????
????? ???
??
???
????? ????? ?????? ?????? ??, ??? ???? ?
??????
.
[3]
????? ????? ?? ???
Log4Shell
, ??????? ??? CVE-2021-44228. ????? ?????? ?????? ?????? ?????
?????????
, ??????? ????? ?? ????? ?????,
[4]
?????? ????? ??????? ????, ??? ??? ??
?????
,
VMWare
?
????
, ?????? ????? ??, ?????? ??????? ??????? ?????. ?????? ????? ?????? ???? 2.15.0 ?????? ???? 2.17.0, ??? ????? ???? ??? ?????? ????? ????? ???????.
[5]
- ^
"Apache Logging Services Project Announces Log4j 1 End-Of-Life; Recommends Upgrade to Log4j 2"
. blogs.apache.org. 2015-08-05.
- ^
CVSS
??????? ? 10.0
- ^
???? ??,
????? ????? ????? ?????? ?? ??????? ????????? ????????
, ????
ynet
, 11 ?????? 2021
?? ??-???
,
????? ?? log4j2 ??? ???? ???? ???? ????? | ??????? ?????
, ???? internet-israel.com, 2021-12-12
- ^
????? ???????, ?
”??? ??????? ??????? ????? ????????”: ???? ????? ?????? ??????????, ??? ?? ?? ??????
, ????
Geektime
, 11 ?????? 2021
- ^
????? ?????: ?????? ????? ?????? ??? Log4j ?????? ????? ??????? ?????
, ????
???? ?????? ??????
, 11 ?????? 2021