logpresso / CVE-2021-44228-Scanner

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228
Apache License 2.0
850 stars 174 forks source link

Files that are inaccessible or otherwise cannot be accessed should be logged in the report #156

Closed strawgate closed 2 years ago

strawgate commented 2 years ago

Files that are not accessible should be logged in the report.

Right now for this information we need to capture the stderr of the application to a file and try to parse it.

Would be great if this was included in the report as like, "Inaccessible", "Read Error" or something.

xeraph commented 2 years ago

@strawgate json report file contains error entries now. You can also receive errors using --syslog-level debug option. Try v2.5.3 :D

strawgate commented 2 years ago

Confirmed on Linux and opened bug https://github.com/logpresso/CVE-2021-44228-Scanner/issues/196 for Windows

xeraph commented 2 years ago

@strawgate Thank you for test report!