Forum Discussion
Tenable Research is providing the following supporting...
Tenable Research is providing the following supporting information about the 31 NASL detection plugins and two WAS plugin recently released in response to a critical vulnerability reported in Log4j (...
One other issue -- it appears Tenable is determining the log4j.jar version number from the FILENAME.
log4j-2.14.0.jar will be identified is 2.14.0
log4j.jar will be identified as "unknown"
I'm not sure if it's possible to get a version number out of the Jar in an efficient manner -- it's in the MANIFEST.INF in most files we've opened up, but it takes time to extract it I imagine.
We've got thousands of "unknown" versions scattered about, how can plugins help us identify them?
