BigFix Inventory SignaturesBigFix Inventory Signatures

Apache Log4j, 0.any_version
Log In or Register to download the signature, and more.


Description

In case that you would like to have more detailed auding of Log4J installation we prepared additional signature that looks for files with patterns log4J-api-*.jar, log4j-core-*.jar, log4j-1 and log4j-2 and collects information about all occurrences of them regardless their version. The signature will provide the detailed version and the JAR location information. Please refer to the previous section to get information on how to use it. Regular version displayed after discovery is 0.any_version, please use Detailed Version to get accurate versioning information.

Property Details

PublisherApache Log4j
Product NameApache Log4j
Software Release0.any_version
Keywordslog4j CVE-2021-44228
Software UniqueId34d0f9b0-f085-11ec-837a-025041000001
Uploaded by on 6/20/2022 3:40:46 AM
Last modified by on 7/7/2022 2:49:19 AM
Counters 6 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Signature Content

<?xml version="1.0" encoding="utf-8"?>
<SoftwareIdentityCatalog exportTimeStamp="2022-07-07T09:46:43Z">
  <Software name="Apache Log4j" vendor="Apache Log4j" uniqueId="34d0f9b0-f085-11ec-837a-025041000001" version="0.any_version">
    <Signature uniqueId="c29c3a45-907e-4ecb-95c9-6fbaed5ae155" modified="2022-07-07T09:20:38Z" created="2022-07-07T09:20:38Z">
      <ExtendedSignature><![CDATA[<MultipleInstance><Iterator export="true" name="INSTALL_PATH"><FindFilePathEx appendFileName="true" name="log4j-*.jar"/></Iterator><Instance><Variable export="false" name="file_name"><VectorToScalar><StringCrop endString="" inputString="$(INSTALL_PATH)" seekFrom="right" startString="\"/></VectorToScalar></Variable><Variable export="false" name="blank_lib"><Or><Contains inputString="$(file_name)" position="contains" searchedString="log4j-1"/><Contains inputString="$(file_name)" position="contains" searchedString="log4j-2"/></Or></Variable><Variable export="false" name="core_lib"><Contains inputString="$(file_name)" position="contains" searchedString="core"/></Variable><Variable export="false" name="api_lib"><Contains inputString="$(file_name)" position="contains" searchedString="api"/></Variable><Variable export="false" name="additional_lib"><Or><Contains inputString="$(file_name)" position="contains" searchedString="tests"/><Contains inputString="$(file_name)" position="contains" searchedString="sources"/><Contains inputString="$(file_name)" position="contains" searchedString="javadoc"/></Or></Variable><Variable export="false" name="api_core_or_blank"><And><Or><ValueOf value="$(blank_lib)"/><ValueOf value="$(core_lib)"/><ValueOf value="$(api_lib)"/></Or><Not><ValueOf value="$(additional_lib)"/></Not></And></Variable><Condition withVariable="api_core_or_blank"><Action do="SKIP" onValue="false"/></Condition><Variable export="false" name="blank_file_name"><Switch><ValueOf value="$(blank_lib)"/><StringCrop endString=".jar" inputString="$(file_name)" seekFrom="left" startString="log4j-"/></Switch></Variable><Variable export="false" name="core_file_name"><Switch><ValueOf value="$(core_lib)"/><StringCrop endString=".jar" inputString="$(file_name)" seekFrom="right" startString="core-"/></Switch></Variable><Variable export="false" name="api_file_name"><Switch><ValueOf value="$(api_lib)"/><StringCrop endString=".jar" inputString="$(file_name)" seekFrom="right" startString="api-"/></Switch></Variable><Variable export="false" name="version"><Switch><ValueOf value="$(core_lib)"/><StringCrop endString="-" inputString="$(core_file_name)" seekFrom="right" startString=""/><ValueOf value="$(api_lib)"/><StringCrop endString="-" inputString="$(api_file_name)" seekFrom="right" startString=""/><ValueOf value="$(blank_lib)"/><ValueOf value="$(blank_file_name)"/></Switch></Variable><Variable export="false" name="proper_version"><Not><Contains inputString="$(version)" position="contains" searchedString="log"/></Not></Variable><Variable export="true" name="DETAILED_VER"><Switch><ValueOf value="$(proper_version)"/><ValueOf value="$(version)"/></Switch></Variable><Variable export="true" name="IS_INSTALLED"><ValueOf value="true"/></Variable></Instance></MultipleInstance>]]></ExtendedSignature>
    </Signature>
  </Software>
</SoftwareIdentityCatalog>

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!
kamil.krawczyk -
Replaced file contents