Forum Discussion
Apache Log4j Detection Additional Improvements Summary:...
Apache Log4j Detection Additional Improvements Summary: Additional improvements have been made to the Windows and Linux / Unix detection plugins for Apache Log4j. The improvements have been recent...
For plugin 156001, the current version in Nessus website is 1.44 with the latest date of updatation as 19.07.2022, however still the mentioned plugin is not able to detect the log4j version from Manifest.MF file. Still the version parsed from filename is considered for determining the file version. Any update to this?
@Saurabh Suman, the MANIFEST.MF file is parsed by the 156001 plugin if the following are set in the scan policy:
- ‘Perform thorough tests’ setting is enabled
- ‘Override normal accuracy’ setting is set to ‘Show potential false alarms’
Please open a technical support ticket if you have an issue so that we can collect the required information to diagnose and assist you with your issue.
