How to check if the updated Openshift Logging is vulnerable to CVE-2021-44228-log4j
Issue
Confirm the log4j
version and that the class has been removed after updating Openshift Logging to the release in which log4j vulnerability was fixed.
Environment
- Red Hat OpenShift Container Platform (RHOCP) 4
- Red Hat OpenShift Logging (RHOL) 5
- Red Hat Openshift Elasticsearch Operator 5
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.