BigFix Inventory SignaturesBigFix Inventory Signatures

Apache Log4j2, 2.x
Log In or Register to download the signature, and more.


Description

In case that you would like to have more detailed auding of Log4J installation we prepared additional signature that looks for files with patterns log4J-api-*.jar, log4j-core-*.jar, log4j-1 and log4j-2 and collects information about all occurrences of them regardless their version. The signature will provide the detailed version and the JAR location information. Please refer to the previous section to get information on how to use it. Regular version displayed after discovery is 2.x, please use Detailed Version to get accurate versioning information.

Property Details

PublisherApache Log4j2
Product NameApache Log4j2
Software Release2.x
KeywordsApache Log4j2, CVE-2021-44228
Software UniqueId4451fbd8-d9bb-482f-8919-87ffbbf66761
Uploaded by on 12/15/2021 7:19:58 AM
Last modified by on 12/15/2021 7:19:58 AM
Counters 93 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 2 ratings. ** Log In or Register to add your rating.

Signature Content

<?xml version="1.0" encoding="utf-8"?>
<SoftwareIdentityCatalog exportTimeStamp="2021-12-15T12:00:00Z">
  <Software name="Apache Log4j2" vendor="Apache Log4j2" uniqueId="4451fbd8-d9bb-482f-8919-87ffbbf66761" version="2.x">
    <Signature uniqueId="c29c3a45-907e-4ecb-95c9-6fbaed5ae155" modified="2021-12-15T12:00:00Z" created="2021-12-15T12:00:00Z">
      <ExtendedSignature><![CDATA[<MultipleInstance><Iterator name="INSTALL_PATH" export="true"><FindFilePathEx name="log4j-*.jar" appendFileName="true"/></Iterator><Instance><Variable name="file_name" export="false"><VectorToScalar><StringCrop inputString="$(INSTALL_PATH)" seekFrom="right" startString="\" endString="" /></VectorToScalar></Variable><Variable name="blank_lib" export="false"><Or><Contains inputString="$(file_name)" position="contains" searchedString="log4j-1"/><Contains inputString="$(file_name)" position="contains" searchedString="log4j-2"/></Or></Variable><Variable name="core_lib" export="false"><Contains inputString="$(file_name)" position="contains" searchedString="core"/></Variable><Variable name="api_lib" export="false"><Contains inputString="$(file_name)" position="contains" searchedString="api"/></Variable><Variable name="additional_lib" export="false"><Or><Contains inputString="$(file_name)" position="contains" searchedString="tests"/><Contains inputString="$(file_name)" position="contains" searchedString="sources"/><Contains inputString="$(file_name)" position="contains" searchedString="javadoc"/></Or></Variable><Variable name="api_core_or_blank" export="false"><And><Or><ValueOf value="$(blank_lib)"/><ValueOf value="$(core_lib)"/><ValueOf value="$(api_lib)"/></Or><Not><ValueOf value="$(additional_lib)"/></Not></And></Variable><Condition withVariable="api_core_or_blank"><Action onValue="false" do="SKIP"/></Condition><Variable export="false" name="blank_file_name"><Switch><ValueOf value="$(blank_lib)"/><StringCrop inputString="$(file_name)" seekFrom="left" startString="log4j-" endString=".jar" /></Switch></Variable><Variable export="false" name="core_file_name"><Switch><ValueOf value="$(core_lib)"/><StringCrop inputString="$(file_name)" seekFrom="right" startString="core-" endString=".jar" /></Switch></Variable><Variable export="false" name="api_file_name"><Switch><ValueOf value="$(api_lib)"/><StringCrop inputString="$(file_name)" seekFrom="right" startString="api-" endString=".jar" /></Switch></Variable><Variable export="true" name="DETAILED_VER"><Switch><ValueOf value="$(core_lib)"/><StringCrop inputString="$(core_file_name)" seekFrom="right" startString="" endString="-" /><ValueOf value="$(api_lib)"/><StringCrop inputString="$(api_file_name)" seekFrom="right" startString="" endString="-" /><ValueOf value="$(blank_lib)"/><ValueOf value="$(blank_file_name)"/></Switch></Variable><Variable export="true" name="IS_INSTALLED"><ValueOf value="true"/></Variable></Instance></MultipleInstance>]]></ExtendedSignature>
    </Signature>
  </Software>
</SoftwareIdentityCatalog>

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!
mmey -
Thanks
edmontana -
works great