fengjixuchui / log4jattacksurface

Intro

Log4j impact manufacturers and components summary from the Internet community. Welcome everyone to submit mr to perfect the possible influence surface.

Affect the internet manufacturer

Apple

Tencent

steam

twitter

Baidu

DIDI

JD

NetEase

CloudFlare

Amazon

Tesla

To be continued

Affect the components

Apache Solr

Apache Druid

Apache Flink

Apache Struts2

flume

dubbo

IBM Qradar SIEM

• /opt/qradar/support/mod_log4j.pl

• logging

PaloAlto Panorama

• logging

Redis

Elastic

kafka

ghidra

ghidra server

Minecraft

PulseSecure

• KB44933 - CVE-2021-44228 - Java logging library (log4j)

UniFi

• UniFi Network Application 6.5.54

VMWare

• vCenter, vCloud

• kb.vmware.com/s/global-search/%40uri#q=Log4j

• VMware Response to CVE-2021-44228: Apache Log4j Remote Code Execution (87068)

A critical vulnerability in Apache Log4j identified by CVE-2021-44228 
has been disclosed that may allow for remote code execution.
VMware has classified this issue as critical and is working on 
publishing fixes and workarounds as a priority.