Forum Discussion
Apache Log4j Detection Improvements Summary: Since CVE-2021-4
Apache Log4j Detection Improvements Summary: Since CVE-2021-44228 was first announced, Tenable has been working diligently on improving the local detections for Apache Log4j on Windows, Linux, and...
@Greg Betz appreciate the notification about the new plugins. Can you help me understand how to interpret the new plugin output for plugin 156001. I see now that it includes a "jndilookup.cass association" and says "found" or "not found". If it equals "found" does that mean it will still mark log4j vulnerabilities as vulnerable and if "not found" then the vulnerabilities will be marked as mitigated?
Or is the new output strictly informational and have no bearing on the log4j vulnerability plugins?
