漏洞类别：Local
漏洞等级： 
漏洞信息
ElasticSearch Logstash is an open source, server-side data processing pipeline that ingests data from a multitude of sources simultaneously, transforms it, and then sends it to your favorite 'stash'.
The version of Apache Log4j used in Logstash was vulnerable to an object deserialization flaw.
Affected Versions:
ElasticSearch Logstash versions prior to 2.8.2 QID Detection Logic (Authenticated):
This QID checks for the installed Logstash package
漏洞危害
A remote attacker could exploit this vulnerability to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.
解决方案
Customers are advised to upgrade to the latest version of Logstash. Refer to Logstash Downloads for more information.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
0daybank
文章评论