{"id":3417,"date":"2021-12-22T14:42:23","date_gmt":"2021-12-22T14:42:23","guid":{"rendered":"https:\/\/www.e-xpertsolutions.com\/?p=3417"},"modified":"2024-02-20T09:05:15","modified_gmt":"2024-02-20T09:05:15","slug":"vulnerabilite-apache-log4j-nos-produits-impactes","status":"publish","type":"post","link":"https:\/\/www.e-xpertsolutions.com\/de\/vulnerabilite-apache-log4j-nos-produits-impactes\/","title":{"rendered":"[ Vuln\u00e9rabilit\u00e9 Apache Log4J ] Nos produits impact\u00e9s"},"content":{"rendered":"<p>[et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row admin_label=&#8221;Post Navigation Top&#8221; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;0px||15px||false|false&#8221; collapsed=&#8221;on&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; custom_css_main_element=&#8221;height: 90px;&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_code admin_label=&#8221;Menu Button&#8221; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; positioning=&#8221;absolute&#8221; position_origin_a=&#8221;top_center&#8221; vertical_offset=&#8221;28px&#8221; z_index=&#8221;1&#8243; width=&#8221;35px&#8221; custom_css_main_element=&#8221;font-size: 35px;&#8221; global_colors_info=&#8221;{}&#8221;]<a href=\"\/actualites\"><i class=\"icon-menu_dots\"><\/i><\/a>[\/et_pb_code][et_pb_post_nav in_same_term=&#8221;on&#8221; module_class=&#8221;tmp-post-navigation tmp-post-navigation-top&#8221; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; title_text_color=&#8221;#000000&#8243; title_font_size=&#8221;18px&#8221; positioning=&#8221;absolute&#8221; position_origin_a=&#8221;center_center&#8221; width=&#8221;100%&#8221; custom_padding=&#8221;0px||||false|false&#8221; global_colors_info=&#8221;{}&#8221; title_text_color__hover_enabled=&#8221;on|hover&#8221; title_text_color__hover=&#8221;#F15D22&#8243;][\/et_pb_post_nav][et_pb_divider color=&#8221;#F15D22&#8243; divider_position=&#8221;bottom&#8221; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; positioning=&#8221;absolute&#8221; position_origin_a=&#8221;bottom_center&#8221; width=&#8221;100%&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_divider][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_post_title meta=&#8221;off&#8221; featured_image=&#8221;off&#8221; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_post_title][et_pb_text _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;|300|||||||&#8221; text_text_color=&#8221;#000000&#8243; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p class=\"descriptif\">Le 9 d\u00e9cembre dernier, Apache a publi\u00e9 une vuln\u00e9rabilit\u00e9 zero-day (CVE-2021-44228) pour Apache Log4j appel\u00e9e \u00ab Log4Shell \u00bb. Cette vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 class\u00e9e comme \u00ab Critique \u00bb avec un score CVSS de 10.0, permettant l&#8217;ex\u00e9cution de code \u00e0 distance avec les privil\u00e8ges utilis\u00e9s par l\u2019applicatif. Les \u00e9quipes d\u2019e-Xpert Solutions sont en cours d\u2019investigation et tentent de recenser activement le statut de vuln\u00e9rabilit\u00e9 des produits que nous vous proposons, et le cas \u00e9ch\u00e9ant si une solution de contournement existe. Vous trouverez dans cet article une synth\u00e8se de nos produits.<\/p>\n<div class=\"blochtml\">\n<p><b><i>Cet article n&#8217;est plus maintenu depuis le 10.01.2022<\/i><\/b><\/p>\n<p><i> Nous avons mis \u00e0 jour les tableaux avec les informations concernant les CVEs \u00a0<a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-45046\" target=\"_blank\" rel=\"noopener\">CVE-2021-45046<\/a>, <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-45104\" target=\"_blank\" rel=\"noopener\">CVE-2021-4104<\/a>, <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-45105\" target=\"_blank\" rel=\"noopener\">CVE-2021-45105<\/a> qui ont suivi la <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">CVE-2021-44228<\/a> initiale.<br \/>Nous avons aussi ajout\u00e9 le lien vers notre <a href=\"https:\/\/github.com\/e-XpertSolutions\/atdefense-research\" target=\"_blank\" rel=\"noopener\">d\u00e9pots git<\/a> et <a href=\"https:\/\/www.youtube.com\/watch?v=4NCyQXcdLmw&amp;ab_channel=e-XpertSolutions\" target=\"_blank\" rel=\"noopener\">notre vid\u00e9o explicative.<\/a> <\/i><\/p>\n<p>Le 9 d\u00e9cembre dernier, Apache a publi\u00e9 une vuln\u00e9rabilit\u00e9 zero-day (<a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">CVE-2021-44228<\/a>) pour Apache Log4j appel\u00e9e \u00ab Log4Shell \u00bb. Cette vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 class\u00e9e comme \u00ab Critique \u00bb avec un score CVSS de 10.0, permettant l&#8217;ex\u00e9cution de code \u00e0 distance avec les privil\u00e8ges utilis\u00e9s par l\u2019applicatif.<\/p>\n<p>La librairie Log4j est une des librairies de logging standard de Java. Un grand nombre de solutions du march\u00e9 sont par cons\u00e9quent touch\u00e9es par cette annonce. Vous trouverez une vid\u00e9o explicative sur <a href=\"https:\/\/www.youtube.com\/watch?v=4NCyQXcdLmw&amp;ab_channel=e-XpertSolutions\" target=\"_blank\" rel=\"noopener\">notre chaine YouTube.<\/a><\/p>\n<p>Les \u00e9quipes d\u2019e-Xpert Solutions sont en cours d\u2019investigation et tentent de recenser activement le statut de vuln\u00e9rabilit\u00e9 des produits que nous vous proposons, et le cas \u00e9ch\u00e9ant si une solution de contournement existe.<\/p>\n<p>Vous trouverez ci-dessous un tableau r\u00e9capitulatif de l\u2019\u00e9tat actuel de nos investigations.<\/p>\n<p>Nous le mettrons \u00e0 jour r\u00e9guli\u00e8rement et restons disponibles en cas de questions suppl\u00e9mentaires.<\/p>\n<p>Actuellement activement exploit\u00e9e par divers acteurs malveillants, nous vous conseillons de retirer l\u2019acc\u00e8s externe aux \u00e9quipements vuln\u00e9rables.<\/p>\n<p>Diverses possibilit\u00e9s de limitation des risques peuvent \u00eatre mises en place. Comme l\u2019interdiction d\u2019acc\u00e8s \u00e0 internet aux serveurs vuln\u00e9rables ou la mise en place de politique WAF avec F5 ou R&amp;S. Pour nos clients SOC At-Defense, plusieurs m\u00e9thodes de d\u00e9tections sont d\u00e9j\u00e0 op\u00e9rationnelles depuis samedi et de nouvelles sont en d\u00e9veloppement afin de pouvoir d\u00e9tecter et r\u00e9agir au plus vite en cas de compromission.<\/p>\n<p>Nos \u00e9quipes du SOC ont mis \u00e0 disposition leurs recherchent pour tenter de d\u00e9tecter des attaques, mais aussi des scripts pour linux et windows afin de d\u00e9terminer si un syst\u00e8me est vuln\u00e9rable. Vous les trouverez sur notre <a href=\"https:\/\/github.com\/e-XpertSolutions\/atdefense-research\" target=\"_blank\" rel=\"noopener\">d\u00e9pots git<\/a><\/p>\n<p>Etant donn\u00e9 que la <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-45104\" target=\"_blank\" rel=\"noopener\">CVE-2021-4104<\/a> ne touche que la branche 1.2 de log4j et uniquement dans une configuration sp\u00e9cific, aucuns de nos produits ne sont touch\u00e9 par cette vuln\u00e9rabilit\u00e9. L&#8217;\u00e9diteur Totemo \u00e9tant le seul utilisant la librairie en version 1.2 \u00e0 notre connaissance, il nous a confirm\u00e9 ne pas \u00eatre vuln\u00e9rable \u00e0 la <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-45104\" target=\"_blank\" rel=\"noopener\">CVE-2021-4104<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<\/div>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<table style=\"border-collapse: collapse; width: 100%; height: 390px;\" border=\"1\">\n<tbody>\n<tr style=\"height: 24px;\">\n<td style=\"width: 25%; height: 24px;\">\n<h3><span style=\"color: #f15d22;\">Editor<\/span><\/h3>\n<\/td>\n<td style=\"width: 25%; height: 24px;\">\n<h3><span style=\"color: #f15d22;\">CVE-2021-44228<\/span><\/h3>\n<\/td>\n<td style=\"width: 25%; height: 24px;\">\n<h3><span style=\"color: #f15d22;\">CVE-2021-45046<\/span><\/h3>\n<\/td>\n<td style=\"width: 25%; height: 24px;\">\n<h3><span style=\"color: #f15d22;\">CVE-2021-45105<\/span><\/h3>\n<\/td>\n<\/tr>\n<tr style=\"height: 10px;\">\n<td style=\"width: 25%; height: 10px;\">\n<h5>ALTIPEAK \/ Safewalk<\/h5>\n<\/td>\n<td style=\"width: 25%; height: 10px;\"><b>Not Vulnerable<\/b><\/td>\n<td style=\"width: 25%; height: 10px;\"><b>Not Vulnerable<\/b><\/td>\n<td style=\"width: 25%; height: 10px;\"><b>Not Vulnerable<\/b><\/td>\n<\/tr>\n<tr style=\"height: 10px;\">\n<td style=\"width: 25%; height: 10px;\">\n<h5>BACKBOX<\/h5>\n<\/td>\n<td style=\"width: 25%; height: 10px;\"><b>Vulnerable<\/b><br \/>Fix : 6.54.06 <br \/><a href=\"https:\/\/updates.backbox.com\/V6.5\/Docs\/CVE-2021-44228.pdf\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"width: 25%; height: 10px;\"><b>Vulnerable<\/b><br \/>Fix : 6.54.06 <br \/><a href=\"https:\/\/updates.backbox.com\/V6.5\/Docs\/CVE-2021-44228.pdf\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"width: 25%; height: 10px;\"><b>Vulnerable<\/b><br \/>Fix : 6.54.06 <br \/><a href=\"https:\/\/updates.backbox.com\/V6.5\/Docs\/CVE-2021-44228.pdf\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr style=\"height: 48px;\">\n<td style=\"font-weight: bold; width: 25%; height: 48px;\">\n<h5>BeyondTrust \/ BOMGAR<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b>*<br \/><a href=\"https:\/\/beyondtrustcorp.service-now.com\/csm?id=csm_kb_article&amp;sys_id=ccd8336cdbe40dd022725385ca9619da\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b>*<br \/><a href=\"https:\/\/beyondtrustcorp.service-now.com\/csm?sys_kb_id=c7842048db2c81d0771c138b4b961935&amp;id=kb_article_view&amp;sysparm_rank=1&amp;sysparm_tsqueryId=d8d6e20adb644d1422725385ca961964\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b>*<\/td>\n<\/tr>\n<tr style=\"height: 48px;\">\n<td style=\"font-weight: bold; width: 25%; height: 48px;\">\n<h5>Broadcom \/ BLUECOAT<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/support.broadcom.com\/security-advisory\/content\/security-advisories\/Symantec-Security-Advisory-for-Log4j-2-CVE-2021-44228-Vulnerability\/SYMSA19793\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/support.broadcom.com\/security-advisory\/content\/security-advisories\/Symantec-Security-Advisory-for-Log4j-2-CVE-2021-44228-Vulnerability\/SYMSA19793\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/support.broadcom.com\/security-advisory\/content\/security-advisories\/Symantec-Security-Advisory-for-Log4j-2-CVE-2021-44228-Vulnerability\/SYMSA19793\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr style=\"height: 48px;\">\n<td style=\"font-weight: bold; width: 25%; height: 48px;\">\n<h5>CHECKPOINT**<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk176865&amp;partition=Basic&amp;product=IPS\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk176865&amp;partition=Basic&amp;product=IPS\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/supportcenter.checkpoint.com\/supportcenter\/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk176865&amp;partition=Basic&amp;product=IPS\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr style=\"height: 48px;\">\n<td style=\"font-weight: bold; width: 25%; height: 48px;\">\n<h5>CLAVISTER<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b>* <br \/><a href=\"https:\/\/www.clavister.com\/advisories\/security\/clav-sa-0297-high-severity-vulnerability-in-apache-log4j2\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b>* <br \/><a href=\"https:\/\/www.clavister.com\/advisories\/security\/clav-sa-0297-high-severity-vulnerability-in-apache-log4j2\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 48px;\"><b>Not Vulnerable<\/b>* <br \/><a href=\"https:\/\/www.clavister.com\/advisories\/security\/clav-sa-0297-high-severity-vulnerability-in-apache-log4j2\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr style=\"height: 72px;\">\n<td style=\"font-weight: bold; width: 25%; height: 72px;\">\n<h5>Clearswift Secure Gateway<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%; height: 72px;\"><b>Vulnerable<\/b><br \/>Fix : v5.4.1<br \/><a href=\"https:\/\/hstechdocs.helpsystems.com\/releasenotes\/Content\/_ProductPages\/Clearswift\/SECUREEmailGateway.htm\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 72px;\"><b>Vulnerable<\/b><br \/>Fix : v5.4.1<br \/><a href=\"https:\/\/hstechdocs.helpsystems.com\/releasenotes\/Content\/_ProductPages\/Clearswift\/SECUREEmailGateway.htm\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 72px;\"><b>Vulnerable<\/b><br \/>Fix : v5.4.2<br \/><a href=\"https:\/\/hstechdocs.helpsystems.com\/releasenotes\/Content\/_ProductPages\/Clearswift\/SECUREEmailGateway.htm\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr style=\"height: 72px;\">\n<td style=\"font-weight: bold; width: 25%; height: 72px;\">\n<h5>ENTRUST<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%; height: 72px;\"><b>Vulnerable<\/b><br \/>Fix : Refer to the link<br \/><a href=\"https:\/\/images.go.entrust.com\/Web\/EntrustInc\/%7Ba7800dc4-1ef8-4c95-bbc5-8a716b88d122%7D_Entrust_Security_Bulletin_E21-008c-v14-20211215_165056.pdf?utm_campaign=Security%20Bulletin%3A%20E21-008c&amp;utm_medium=email&amp;utm_source=Eloqua&amp;edc_sfid=\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 72px;\"><b>Vulnerable<\/b><br \/>Fix : Refer to the link<br \/><a href=\"https:\/\/images.go.entrust.com\/Web\/EntrustInc\/%7Ba7800dc4-1ef8-4c95-bbc5-8a716b88d122%7D_Entrust_Security_Bulletin_E21-008c-v14-20211215_165056.pdf?utm_campaign=Security%20Bulletin%3A%20E21-008c&amp;utm_medium=email&amp;utm_source=Eloqua&amp;edc_sfid=\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%; height: 72px;\"><b>Vulnerable<\/b><br \/>Fix : Refer to the link<br \/><a href=\"https:\/\/images.go.entrust.com\/Web\/EntrustInc\/%7Ba7800dc4-1ef8-4c95-bbc5-8a716b88d122%7D_Entrust_Security_Bulletin_E21-008c-v14-20211215_165056.pdf?utm_campaign=Security%20Bulletin%3A%20E21-008c&amp;utm_medium=email&amp;utm_source=Eloqua&amp;edc_sfid=\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>F5**<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b> <br \/><a href=\"https:\/\/support.f5.com\/csp\/article\/K19026212\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b> <br \/><a href=\"https:\/\/support.f5.com\/csp\/article\/K19026212\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b> <br \/><a href=\"https:\/\/support.f5.com\/csp\/article\/K19026212\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>FORCEPOINT DLP<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : Workaround provided<br \/><a href=\"https:\/\/support.forcepoint.com\/s\/login\/?ec=302&amp;startURL=%2Fs%2Farticle%2FApache-log4j-Zero-Day-RCE-Vulnerability-CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : Workaround provided<br \/><a href=\"https:\/\/support.forcepoint.com\/s\/login\/?ec=302&amp;startURL=%2Fs%2Farticle%2FApache-log4j-Zero-Day-RCE-Vulnerability-CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/support.forcepoint.com\/s\/login\/?ec=302&amp;startURL=%2Fs%2Farticle%2FApache-log4j-Zero-Day-RCE-Vulnerability-CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>FORCEPOINT NGFW<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : Workaround provided<br \/><a href=\"https:\/\/support.forcepoint.com\/s\/login\/?ec=302&amp;startURL=%2Fs%2Farticle%2FApache-log4j-Zero-Day-RCE-Vulnerability-CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : Workaround provided<br \/><a href=\"https:\/\/support.forcepoint.com\/s\/login\/?ec=302&amp;startURL=%2Fs%2Farticle%2FApache-log4j-Zero-Day-RCE-Vulnerability-CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/support.forcepoint.com\/s\/login\/?ec=302&amp;startURL=%2Fs%2Farticle%2FApache-log4j-Zero-Day-RCE-Vulnerability-CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>FORCEPOINT WEB<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : Workaround provided<br \/><a href=\"https:\/\/support.forcepoint.com\/s\/login\/?ec=302&amp;startURL=%2Fs%2Farticle%2FApache-log4j-Zero-Day-RCE-Vulnerability-CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : Workaround provided<br \/><a href=\"https:\/\/support.forcepoint.com\/s\/login\/?ec=302&amp;startURL=%2Fs%2Farticle%2FApache-log4j-Zero-Day-RCE-Vulnerability-CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/support.forcepoint.com\/s\/login\/?ec=302&amp;startURL=%2Fs%2Farticle%2FApache-log4j-Zero-Day-RCE-Vulnerability-CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>GUARDICORE<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : Workaround provided<br \/><a href=\"https:\/\/guardicore.zendesk.com\/hc\/en-us\/community\/posts\/4412228220562--Log4j-Info-Stream-\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Under investigation<\/b><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Under investigation<\/b><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>IDNOMIC<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Under investigation<\/b><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>LUMENSION IVANTI<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b>**<br \/><a href=\"https:\/\/forums.ivanti.com\/s\/article\/CVE-2021-44228-Java-logging-library-log4j-Ivanti-Products-Impact-Mapping?language=en_US\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b>**<br \/><a href=\"https:\/\/forums.ivanti.com\/s\/article\/CVE-2021-44228-Java-logging-library-log4j-Ivanti-Products-Impact-Mapping?language=en_US\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Under investigation<\/b><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>McAfee ePolicy Orchestrator v5.10 CU11<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : ePO 5.10 Update 11 Hotfix 2<br \/><a href=\"https:\/\/kc.mcafee.com\/agent\/index?page=content&amp;id=SB10377\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : ePO 5.10 Update 11 Hotfix 2<br \/><a href=\"https:\/\/kc.mcafee.com\/agent\/index?page=content&amp;id=SB10377\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Under investigation<\/b><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>McAfee Web Gateway<\/h5>\n<h5>8.2.21-8.2.24<\/h5>\n<h5>9.2.12-9.2.15<\/h5>\n<h5>10.2.0-10.2.4<\/h5>\n<h5>11.0.0-11.0.1<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : 8.2.25, 9.2.16 10.2.5 and 11.0.2<br \/><a href=\"https:\/\/kc.mcafee.com\/agent\/index?page=content&amp;id=SB10377\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : 8.2.25, 9.2.16 10.2.5 and 11.0.2<br \/><a href=\"https:\/\/kc.mcafee.com\/agent\/index?page=content&amp;id=SB10377\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : 8.2.25, 9.2.16 10.2.5 and 11.0.2<br \/><a href=\"https:\/\/kc.mcafee.com\/agent\/index?page=content&amp;id=SB10377\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>McAfee ATD, Web Gateway (other versions), EPO (Other versions), Content security reporter<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/kc.mcafee.com\/agent\/index?page=content&amp;id=SB10377\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/kc.mcafee.com\/agent\/index?page=content&amp;id=SB10377\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/kc.mcafee.com\/agent\/index?page=content&amp;id=SB10377\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>PICUS<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Under investigation<\/b><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>PROOFPOINT<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> <br \/>Fix : 8.19.0<br \/><a href=\"https:\/\/proofpointcommunities.force.com\/community\/s\/article\/Proofpoint-Statement-Regarding-CVE-2021-44228-Java-logging-package-log4j2\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> <br \/>Fix : 8.19.0<br \/><a href=\"https:\/\/proofpointcommunities.force.com\/community\/s\/article\/Proofpoint-Statement-Regarding-CVE-2021-44228-Java-logging-package-log4j2\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Under investigation<\/b><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>QUALYS<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Under investigation<\/b><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Under investigation<\/b><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Under investigation<\/b><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>Rohde Schwarz &#8211; WAF**<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> &#8211; Not exploitable <br \/>Fix : Workaround provided<br \/><a href=\"https:\/\/documentation.appsec.rohde-schwarz.com\/display\/SECURITYEN\/CVE-2021-44228+-+Apache+Log4j2+JNDI+RCE\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> &#8211; Not exploitable <br \/>Fix : Workaround provided<br \/><a href=\"https:\/\/documentation.appsec.rohde-schwarz.com\/display\/SECURITYEN\/CVE-2021-44228+-+Apache+Log4j2+JNDI+RCE\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> &#8211; Not exploitable <br \/>Fix : Workaround provided<br \/><a href=\"https:\/\/documentation.appsec.rohde-schwarz.com\/display\/SECURITYEN\/CVE-2021-44228+-+Apache+Log4j2+JNDI+RCE\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>RSA SecuriID Access<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b> <br \/><a href=\"https:\/\/community.rsa.com\/t5\/general-security-advisories-and\/rsa-customer-advisory-apache-vulnerability-log4j2-cve-2021-44228\/ta-p\/660501\" target=\"_blank\" rel=\"noopener\">Link<\/a><br \/>Special remark : 8.6 Patch 1 included a third-party update which contains an embedded version of log4j (version 2.11) that is <b>Vulnerable<\/b> to this attack. However, this component does not support JNDI lookup<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b> <br \/><a href=\"https:\/\/community.rsa.com\/t5\/general-security-advisories-and\/rsa-customer-advisory-apache-vulnerability-log4j2-cve-2021-44228\/ta-p\/660501\" target=\"_blank\" rel=\"noopener\">Link<\/a><br \/>Special remark : 8.6 Patch 1 included a third-party update which contains an embedded version of log4j (version 2.11) that is <b>Vulnerable<\/b> to this attack. However, this component does not support JNDI lookup<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b> <br \/><a href=\"https:\/\/community.rsa.com\/t5\/general-security-advisories-and\/rsa-customer-advisory-apache-vulnerability-log4j2-cve-2021-44228\/ta-p\/660501\" target=\"_blank\" rel=\"noopener\">Link<\/a><br \/>Special remark : 8.6 Patch 1 included a third-party update which contains an embedded version of log4j (version 2.11) that is <b>Vulnerable<\/b> to this attack. However, this component does not support JNDI lookup<\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>RSA SecuriID Identity Router<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> <br \/>Fix : v12.12.0.0.17 <a href=\"https:\/\/community.rsa.com\/t5\/securid-access-product\/securid-identity-router-vulnerability-in-the-apache-mod-proxy\/ta-p\/652170\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> <br \/>Fix : v12.12.0.0.17 <a href=\"https:\/\/community.rsa.com\/t5\/securid-access-product\/securid-identity-router-vulnerability-in-the-apache-mod-proxy\/ta-p\/652170\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> <br \/>Fix : v12.12.0.0.17 <a href=\"https:\/\/community.rsa.com\/t5\/securid-access-product\/securid-identity-router-vulnerability-in-the-apache-mod-proxy\/ta-p\/652170\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>SPLUNK<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> with specific addon <br \/>Fix : Refer to the documentation<br \/><a href=\"https:\/\/www.splunk.com\/en_us\/blog\/bulletins\/splunk-security-advisory-for-apache-log4j-cve-2021-44228.html\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> with specific addon <br \/>Fix : Refer to the documentation<br \/><a href=\"https:\/\/www.splunk.com\/en_us\/blog\/bulletins\/splunk-security-advisory-for-apache-log4j-cve-2021-44228.html\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> with specific addon <br \/>Fix : Refer to the documentation<br \/><a href=\"https:\/\/www.splunk.com\/en_us\/blog\/bulletins\/splunk-security-advisory-for-apache-log4j-cve-2021-44228.html\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>TOTEMO<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>TUFIN Classic<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> <br \/>Fix : See documentation. <br \/><a href=\"https:\/\/forum.tufin.com\/support\/kc\/latest\/Content\/Suite\/CVE-2021-44228.htm?cshid=CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> <br \/>Fix : See documentation. <br \/><a href=\"https:\/\/forum.tufin.com\/support\/kc\/latest\/Content\/Suite\/CVE-2021-44228.htm?cshid=CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> <br \/>Fix : See documentation. <br \/><a href=\"https:\/\/forum.tufin.com\/support\/kc\/latest\/Content\/Suite\/CVE-2021-44228.htm?cshid=CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>TUFIN Aurora<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> <br \/>Fix : R21-2 PHF1.1 &#8212; WARNING : R21-3 PRC1.0.0, Fix should be available January the 3rd. <br \/><a href=\"https:\/\/forum.tufin.com\/support\/kc\/latest\/Content\/Suite\/CVE-2021-44228.htm?cshid=CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> <br \/>Fix : R21-2 PHF1.1 &#8212; WARNING : R21-3 PRC1.0.0, Fix should be available January the 3rd. <br \/><a href=\"https:\/\/forum.tufin.com\/support\/kc\/latest\/Content\/Suite\/CVE-2021-44228.htm?cshid=CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b> <br \/>Fix : R21-2 PHF1.1 &#8212; WARNING : R21-3 PRC1.0.0, Fix should be available January the 3rd. <br \/><a href=\"https:\/\/forum.tufin.com\/support\/kc\/latest\/Content\/Suite\/CVE-2021-44228.htm?cshid=CVE-2021-44228\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>WMware Unified Access Gateway<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : UAG 2111.1 <a href=\"https:\/\/kb.vmware.com\/s\/article\/87092\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : UAG 2111.1 <a href=\"https:\/\/kb.vmware.com\/s\/article\/87092\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not vulnerable<\/b><br \/><a href=\"https:\/\/kb.vmware.com\/s\/article\/87092\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>VMware Workspace ONE Access Connector<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Show link<br \/><a href=\"https:\/\/kb.vmware.com\/s\/article\/87091\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : Show link<br \/><a href=\"https:\/\/kb.vmware.com\/s\/article\/87183\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Vulnerable<\/b><br \/>Fix : Show link<br \/><a href=\"https:\/\/kb.vmware.com\/s\/article\/87183\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"font-weight: bold; width: 25%;\">\n<h5>VMware Workspace ONE UEM Console &amp; Device<\/h5>\n<\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/kb.vmware.com\/s\/article\/87068\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not Vulnerable<\/b><br \/><a href=\"https:\/\/kb.vmware.com\/s\/article\/87068\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<td style=\"vertical-align: top; width: 25%;\"><b>Not vulnerable<\/b><br \/><a href=\"https:\/\/kb.vmware.com\/s\/article\/87092\" target=\"_blank\" rel=\"noopener\">Link<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;|300|||||||&#8221; text_text_color=&#8221;#000000&#8243; global_colors_info=&#8221;{}&#8221;]<\/p>\n<div class=\"blochtml\">\n<p><i>* Les produits que nous proposons ne sont pas vuln\u00e9rables. D&#8217;autres du m\u00eame \u00e9diteurs peuvent l&#8217;\u00eatre.<\/i><br \/><i>** Les produits de ces \u00e9diteurs proposent des solutions pour aider \u00e0 mitiger le risque par des signatures WAF ou IPS.<\/i><\/p>\n<p>Nous restons \u00e0 votre disposition. N&#8217;h\u00e9sitez pas \u00e0 nous contacter pour plus de renseignements.<\/p>\n<\/div>\n<div class=\"informations-partage\">\n<p class=\"partage\">\n<\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row admin_label=&#8221;Post Navigation Bottom&#8221; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; collapsed=&#8221;on&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_divider color=&#8221;#F15D22&#8243; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_divider][et_pb_code admin_label=&#8221;Menu Button&#8221; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; positioning=&#8221;absolute&#8221; position_origin_a=&#8221;top_center&#8221; vertical_offset=&#8221;34px&#8221; z_index=&#8221;1&#8243; width=&#8221;35px&#8221; custom_css_main_element=&#8221;font-size: 35px;||z-index: 1;&#8221; global_colors_info=&#8221;{}&#8221;]<a href=\"\/actualites\"><i class=\"icon-menu_dots\"><\/i><\/a>[\/et_pb_code][et_pb_post_nav in_same_term=&#8221;on&#8221; module_class=&#8221;tmp-post-navigation tmp-post-navigation-bottom&#8221; _builder_version=&#8221;4.16&#8243; _module_preset=&#8221;default&#8221; title_text_color=&#8221;#000000&#8243; title_font_size=&#8221;18px&#8221; positioning=&#8221;absolute&#8221; position_origin_a=&#8221;center_center&#8221; width=&#8221;100%&#8221; global_colors_info=&#8221;{}&#8221; title_text_color__hover_enabled=&#8221;on|hover&#8221; title_text_color__hover=&#8221;#F15D22&#8243;][\/et_pb_post_nav][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Le 9 d\u00e9cembre dernier, Apache a publi\u00e9 une vuln\u00e9rabilit\u00e9 zero-day (CVE-2021-44228) pour Apache Log4j appel\u00e9e \u00ab Log4Shell \u00bb. Cette vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 class\u00e9e comme \u00ab Critique \u00bb avec un score [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":5333,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[9,15],"tags":[],"class_list":["post-3417","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bon-a-savoir","category-infos-techno"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.8 (Yoast SEO v28.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>[ Vuln\u00e9rabilit\u00e9 Apache Log4J ] Nos produits impact\u00e9s|e-Xpert Solutions SA<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.e-xpertsolutions.com\/de\/vulnerabilite-apache-log4j-nos-produits-impactes\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"[ Vuln\u00e9rabilit\u00e9 Apache Log4J ] Nos produits impact\u00e9s | e-Xpert Solutions SA\" \/>\n<meta property=\"og:description\" content=\"Le 9 d\u00e9cembre dernier, Apache a publi\u00e9 une vuln\u00e9rabilit\u00e9 zero-day (CVE-2021-44228) pour Apache Log4j appel\u00e9e \u00ab Log4Shell \u00bb. Cette vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 class\u00e9e comme \u00ab Critique \u00bb avec un score [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.e-xpertsolutions.com\/de\/vulnerabilite-apache-log4j-nos-produits-impactes\/\" \/>\n<meta property=\"og:site_name\" content=\"e-Xpert Solutions SA\" \/>\n<meta property=\"article:published_time\" content=\"2021-12-22T14:42:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-20T09:05:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.e-xpertsolutions.com\/wp-content\/uploads\/2022\/01\/BLOG_Feature-img-900-px_log4J.png\" \/>\n\t<meta property=\"og:image:width\" content=\"900\" \/>\n\t<meta property=\"og:image:height\" content=\"636\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"K\u00fcndig Thomas\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Verfasst von\" \/>\n\t<meta name=\"twitter:data1\" content=\"K\u00fcndig Thomas\" \/>\n\t<meta name=\"twitter:label2\" content=\"Gesch\u00e4tzte Lesezeit\" \/>\n\t<meta name=\"twitter:data2\" content=\"7\u00a0Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/\"},\"author\":{\"name\":\"K\u00fcndig Thomas\",\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/#\\\/schema\\\/person\\\/9923a3e235663aab0a049a2de46c7845\"},\"headline\":\"[ Vuln\u00e9rabilit\u00e9 Apache Log4J ] Nos produits impact\u00e9s\",\"datePublished\":\"2021-12-22T14:42:23+00:00\",\"dateModified\":\"2024-02-20T09:05:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/\"},\"wordCount\":1573,\"commentCount\":64,\"publisher\":{\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/BLOG_Feature-img-900-px_log4J.png\",\"articleSection\":[\"Bon \u00e0 savoir\",\"Infos Techno\"],\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/\",\"url\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/\",\"name\":\"[ Vuln\u00e9rabilit\u00e9 Apache Log4J ] Nos produits impact\u00e9s|e-Xpert Solutions SA\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/BLOG_Feature-img-900-px_log4J.png\",\"datePublished\":\"2021-12-22T14:42:23+00:00\",\"dateModified\":\"2024-02-20T09:05:15+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/BLOG_Feature-img-900-px_log4J.png\",\"contentUrl\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/BLOG_Feature-img-900-px_log4J.png\",\"width\":900,\"height\":636},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/vulnerabilite-apache-log4j-nos-produits-impactes\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"[ Vuln\u00e9rabilit\u00e9 Apache Log4J ] Nos produits impact\u00e9s\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/#website\",\"url\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/\",\"name\":\"e-Xpert Solutions SA\",\"description\":\"Votre guide en s\u00e9curit\u00e9 informatique\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/#organization\",\"name\":\"e-Xpert Solutions SA\",\"url\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/Logo_eXpert_Quadri_RVB.png\",\"contentUrl\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/Logo_eXpert_Quadri_RVB.png\",\"width\":7526,\"height\":3043,\"caption\":\"e-Xpert Solutions SA\"},\"image\":{\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/e-xpert-solutions-sa\\\/\"],\"description\":\"A propos d\u2019e-Xpert Solutions \u2013 www.e-xpertsolutions.com \u2013 e-Xpert Solutions est une PME Suisse sp\u00e9cialis\u00e9e dans la cybers\u00e9curit\u00e9 depuis 2001. Elle propose des services dans le domaine de l\u2019int\u00e9gration, les tests d\u2019intrusion (pentest), la r\u00e9ponse \u00e0 incident ainsi que des services manag\u00e9s gr\u00e2ce \u00e0 son Security Operating Center (SOC), 7\\\/7 \u2013 24\\\/24. e-Xpert Solutions compte plus de 45 experts en Cybers\u00e9curit\u00e9. Depuis 2021, notre Centre Op\u00e9rationnel de S\u00e9curit\u00e9 (SOC) ainsi que notre service support ont obtenu la certification ISO 27001.\",\"email\":\"info@e-xpertsolutions.com\",\"telephone\":\"+41 22 727 05 55\",\"legalName\":\"e-Xpert Solutions S.A.\",\"foundingDate\":\"2001-04-01\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"11\",\"maxValue\":\"50\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/#\\\/schema\\\/person\\\/9923a3e235663aab0a049a2de46c7845\",\"name\":\"K\u00fcndig Thomas\",\"url\":\"https:\\\/\\\/www.e-xpertsolutions.com\\\/de\\\/author\\\/thomas-kundig\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"[ Vuln\u00e9rabilit\u00e9 Apache Log4J ] Nos produits impact\u00e9s|e-Xpert Solutions SA","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.e-xpertsolutions.com\/de\/vulnerabilite-apache-log4j-nos-produits-impactes\/","og_locale":"de_DE","og_type":"article","og_title":"[ Vuln\u00e9rabilit\u00e9 Apache Log4J ] Nos produits impact\u00e9s | e-Xpert Solutions SA","og_description":"Le 9 d\u00e9cembre dernier, Apache a publi\u00e9 une vuln\u00e9rabilit\u00e9 zero-day (CVE-2021-44228) pour Apache Log4j appel\u00e9e \u00ab Log4Shell \u00bb. Cette vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 class\u00e9e comme \u00ab Critique \u00bb avec un score [&hellip;]","og_url":"https:\/\/www.e-xpertsolutions.com\/de\/vulnerabilite-apache-log4j-nos-produits-impactes\/","og_site_name":"e-Xpert Solutions SA","article_published_time":"2021-12-22T14:42:23+00:00","article_modified_time":"2024-02-20T09:05:15+00:00","og_image":[{"width":900,"height":636,"url":"https:\/\/www.e-xpertsolutions.com\/wp-content\/uploads\/2022\/01\/BLOG_Feature-img-900-px_log4J.png","type":"image\/png"}],"author":"K\u00fcndig Thomas","twitter_card":"summary_large_image","twitter_misc":{"Verfasst von":"K\u00fcndig Thomas","Gesch\u00e4tzte Lesezeit":"7\u00a0Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/#article","isPartOf":{"@id":"https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/"},"author":{"name":"K\u00fcndig Thomas","@id":"https:\/\/www.e-xpertsolutions.com\/#\/schema\/person\/9923a3e235663aab0a049a2de46c7845"},"headline":"[ Vuln\u00e9rabilit\u00e9 Apache Log4J ] Nos produits impact\u00e9s","datePublished":"2021-12-22T14:42:23+00:00","dateModified":"2024-02-20T09:05:15+00:00","mainEntityOfPage":{"@id":"https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/"},"wordCount":1573,"commentCount":64,"publisher":{"@id":"https:\/\/www.e-xpertsolutions.com\/#organization"},"image":{"@id":"https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/#primaryimage"},"thumbnailUrl":"https:\/\/www.e-xpertsolutions.com\/wp-content\/uploads\/2022\/01\/BLOG_Feature-img-900-px_log4J.png","articleSection":["Bon \u00e0 savoir","Infos Techno"],"inLanguage":"de","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/","url":"https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/","name":"[ Vuln\u00e9rabilit\u00e9 Apache Log4J ] Nos produits impact\u00e9s|e-Xpert Solutions SA","isPartOf":{"@id":"https:\/\/www.e-xpertsolutions.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/#primaryimage"},"image":{"@id":"https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/#primaryimage"},"thumbnailUrl":"https:\/\/www.e-xpertsolutions.com\/wp-content\/uploads\/2022\/01\/BLOG_Feature-img-900-px_log4J.png","datePublished":"2021-12-22T14:42:23+00:00","dateModified":"2024-02-20T09:05:15+00:00","breadcrumb":{"@id":"https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/"]}]},{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/#primaryimage","url":"https:\/\/www.e-xpertsolutions.com\/wp-content\/uploads\/2022\/01\/BLOG_Feature-img-900-px_log4J.png","contentUrl":"https:\/\/www.e-xpertsolutions.com\/wp-content\/uploads\/2022\/01\/BLOG_Feature-img-900-px_log4J.png","width":900,"height":636},{"@type":"BreadcrumbList","@id":"https:\/\/www.e-xpertsolutions.com\/vulnerabilite-apache-log4j-nos-produits-impactes\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.e-xpertsolutions.com\/"},{"@type":"ListItem","position":2,"name":"[ Vuln\u00e9rabilit\u00e9 Apache Log4J ] Nos produits impact\u00e9s"}]},{"@type":"WebSite","@id":"https:\/\/www.e-xpertsolutions.com\/#website","url":"https:\/\/www.e-xpertsolutions.com\/","name":"e-Xpert Solutions SA","description":"Votre guide en s\u00e9curit\u00e9 informatique","publisher":{"@id":"https:\/\/www.e-xpertsolutions.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.e-xpertsolutions.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"},{"@type":"Organization","@id":"https:\/\/www.e-xpertsolutions.com\/#organization","name":"e-Xpert Solutions SA","url":"https:\/\/www.e-xpertsolutions.com\/","logo":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/www.e-xpertsolutions.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.e-xpertsolutions.com\/wp-content\/uploads\/2023\/11\/Logo_eXpert_Quadri_RVB.png","contentUrl":"https:\/\/www.e-xpertsolutions.com\/wp-content\/uploads\/2023\/11\/Logo_eXpert_Quadri_RVB.png","width":7526,"height":3043,"caption":"e-Xpert Solutions SA"},"image":{"@id":"https:\/\/www.e-xpertsolutions.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/e-xpert-solutions-sa\/"],"description":"A propos d\u2019e-Xpert Solutions \u2013 www.e-xpertsolutions.com \u2013 e-Xpert Solutions est une PME Suisse sp\u00e9cialis\u00e9e dans la cybers\u00e9curit\u00e9 depuis 2001. Elle propose des services dans le domaine de l\u2019int\u00e9gration, les tests d\u2019intrusion (pentest), la r\u00e9ponse \u00e0 incident ainsi que des services manag\u00e9s gr\u00e2ce \u00e0 son Security Operating Center (SOC), 7\/7 \u2013 24\/24. e-Xpert Solutions compte plus de 45 experts en Cybers\u00e9curit\u00e9. Depuis 2021, notre Centre Op\u00e9rationnel de S\u00e9curit\u00e9 (SOC) ainsi que notre service support ont obtenu la certification ISO 27001.","email":"info@e-xpertsolutions.com","telephone":"+41 22 727 05 55","legalName":"e-Xpert Solutions S.A.","foundingDate":"2001-04-01","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"}},{"@type":"Person","@id":"https:\/\/www.e-xpertsolutions.com\/#\/schema\/person\/9923a3e235663aab0a049a2de46c7845","name":"K\u00fcndig Thomas","url":"https:\/\/www.e-xpertsolutions.com\/de\/author\/thomas-kundig\/"}]}},"_links":{"self":[{"href":"https:\/\/www.e-xpertsolutions.com\/de\/wp-json\/wp\/v2\/posts\/3417","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.e-xpertsolutions.com\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.e-xpertsolutions.com\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.e-xpertsolutions.com\/de\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/www.e-xpertsolutions.com\/de\/wp-json\/wp\/v2\/comments?post=3417"}],"version-history":[{"count":0,"href":"https:\/\/www.e-xpertsolutions.com\/de\/wp-json\/wp\/v2\/posts\/3417\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.e-xpertsolutions.com\/de\/wp-json\/wp\/v2\/media\/5333"}],"wp:attachment":[{"href":"https:\/\/www.e-xpertsolutions.com\/de\/wp-json\/wp\/v2\/media?parent=3417"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.e-xpertsolutions.com\/de\/wp-json\/wp\/v2\/categories?post=3417"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.e-xpertsolutions.com\/de\/wp-json\/wp\/v2\/tags?post=3417"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}