Forum Discussion

ibelyna's avatar
ibelyna
Not applicable
4 years ago

Tenable Research is providing the following supporting...

Tenable Research is providing the following supporting information about the 31 NASL detection plugins and two WAS plugin recently released in response to a critical vulnerability reported in Log4j (...
CVE
Tenable
Tenable Research
paul_jacoby's avatar
paul_jacoby
Connect Contributor V
4 years ago

We continue to see some false positives on plugin 156002. Example output which shows the detected version as NOT log4j2.

 Path       : C:\Oracle\Middleware\EPMSystem11R1\common\loggers\Log4j\1.2.14\lib\log4j-1.2.14.jar

 Installed version : 1.2.14

 Fixed version   : 2.15.0

These were all found on one user's machine:

 Path       : C:\Documents and Settings\user\.eclipse\org.eclipse.platform_4.4.2_1655873425_win32_win32_x86_64\configuration\org.eclipse.osgi\878\0\.cp\lib\log4j-1.2.15.jar

 Installed version : 1.2.15

 Fixed version   : 2.15.0

 Path       : C:\Documents and Settings\user\.eclipse\org.eclipse.platform_4.4.2_1655873425_win32_win32_x86_64\configuration\org.eclipse.osgi\246\0\.cp\lib\log4j-1.2.15.jar

 Installed version : 1.2.15

 Fixed version   : 2.15.0

 Path       : C:\Documents and Settings\user\.eclipse\org.eclipse.platform_4.4.2_1655873425_win32_win32_x86_64\configuration\org.eclipse.osgi\285\0\.cp\lib\log4j-1.2.15.jar

 Installed version : 1.2.15

 Fixed version   : 2.15.0

 Path       : C:\Program Files\IBM\SDPShared\plugins\com.hp.hpl.jena.rdf_2.6.3.v20171117_2207\log4j-1.2.14.jar

 Installed version : 1.2.14

 Fixed version   : 2.15.0

 Path       : C:\Program Files\IBM\SDPShared\plugins\com.ibm.nex.3rdparty.apache_2.2.0.v20100417_1714\lib\log4j-1.2.14.jar

 Installed version : 1.2.14

 Fixed version   : 2.15.0

 Path       : C:\Program Files\IBM\SDP\configuration\org.eclipse.osgi\249\0\.cp\lib\log4j-1.2.13.jar

 Installed version : 1.2.13

 Fixed version   : 2.15.0

 Path       : C:\Program Files (x86)\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\java\lib\external\axis2\1.6.2\log4j-1.2.15.jar

 Installed version : 1.2.15

 Fixed version   : 2.15.0

 Path       : C:\Users\user\.eclipse\org.eclipse.platform_4.4.2_1655873425_win32_win32_x86_64\configuration\org.eclipse.osgi\246\0\.cp\lib\log4j-1.2.15.jar

 Installed version : 1.2.15

 Fixed version   : 2.15.0

 Path       : C:\Users\user\.eclipse\org.eclipse.platform_4.4.2_1655873425_win32_win32_x86_64\configuration\org.eclipse.osgi\285\0\.cp\lib\log4j-1.2.15.jar

 Installed version : 1.2.15

 Fixed version   : 2.15.0

 Path       : C:\Users\user\.eclipse\org.eclipse.platform_4.4.2_1655873425_win32_win32_x86_64\configuration\org.eclipse.osgi\878\0\.cp\lib\log4j-1.2.15.jar

 Installed version : 1.2.15

 Fixed version   : 2.15.0