Forum Discussion
Apache Log4j Detection for Windows - Manifest / Properties...
@Bryan Jones The detection method to check the MANIFEST or properties file in detected Java archive files for the presence and version of Log4j was added in 202201080412.
This release highlight is for a new requirement that both the ‘Perform thorough tests’ and ‘Override normal accuracy’ settings need to be set as mentioned above in order for the MANIFEST/properties detection method to run.
Regarding the Apache Log4j detection for Linux, we're monitoring whether we need to introduce the same requirement but as far as we aware, this detection method on Linux requires fewer resources. If you (or anybody reading this) is having an issue with either detection plugin, please open a technical support ticket so that we can properly diagnosis the issue.
If both the ‘Perform thorough tests’ and ‘Override normal accuracy’ settings are turned off for scans we should not see impact for MANIFEST/properties detection method running correct. Has of 1/17 we have received this plugin update and have both settings turned off and we are seeing impact to memory utilization on windows endpoints from the nessus agent scans.
