search

YfryTchsGD / Log4jAttackSurface

2.09k stars 259 forks source link

Update List #38

Open jasonseatosky opened 2 years ago

jasonseatosky commented 2 years ago

Can someone please add:

ViewPoint Spectrum (confirmed vulnerable) SysAid (confirmed Vulnerable)

roycewilliams commented 2 years ago

Do you have links for either of these?

gimmebackdabana commented 2 years ago

I don't know if it's vulnerable but GFI Kerio Connect uses log4j for it's IM system.

.jar files are located in (Windows):

c:\Program Files\Kerio\MailServer\javaservices\im\lib\log4j-api-2.5.jar
c:\Program Files\Kerio\MailServer\javaservices\im\lib\log4j-core-2.5.jar
c:\Program Files\Kerio\MailServer\javaservices\im\lib\log4j-slf4j-impl-2.5.jar