topic Second Log4j Vulnerability (CVE-2021-45046) Discovered in General Topics

Second Log4j Vulnerability (CVE-2021-45046) Discovered

HeikoAnkenbrand — Wed, 15 Dec 2021 11:07:30 GMT

Is there any more detailed information from Check Point on this vulnerability yet?

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046

Re: Second Log4j Vulnerability (CVE-2021-45046) Discovered

_Val_ — Wed, 15 Dec 2021 11:11:19 GMT

I will ask the relevant team to comment, but from looking at the description, my guess is, we are not vulnerable. We do not use that library, as before.

Re: Second Log4j Vulnerability (CVE-2021-45046) Discovered

ClonyShen — Wed, 15 Dec 2021 16:27:24 GMT

Is there an IPS Signatures (CVE-2021-45046) in the Check Point ?

Re: Second Log4j Vulnerability (CVE-2021-45046) Discovered

Ataaf — Wed, 15 Dec 2021 17:40:23 GMT

Do we have checkpoint IPS signature for CVE-2021-45046. if not, when will it be released?

Re: Second Log4j Vulnerability (CVE-2021-45046) Discovered

_Val_ — Thu, 16 Dec 2021 20:31:03 GMT

Thanks for your patience. Here is the official answer:

We are not vulnerable to CVE-2021-45046.
Threat Prevention signatures are now available: https://www.checkpoint.com/defense/advisories/public/2021/cpai-2021-0936.html

Re: Second Log4j Vulnerability (CVE-2021-45046) Discovered

Peggy_Lee — Thu, 16 Dec 2021 15:33:49 GMT

May I ask if there is an eta for the signature? Thanks

Re: Second Log4j Vulnerability (CVE-2021-45046) Discovered

_Val_ — Thu, 16 Dec 2021 20:32:10 GMT

@ClonyShen, @Ataaf, @Peggy_Lee There is protection available now: https://www.checkpoint.com/defense/advisories/public/2021/cpai-2021-0936.html

Re: Second Log4j Vulnerability (CVE-2021-45046) Discovered

Andreas_Hofmann — Mon, 20 Dec 2021 16:08:47 GMT

Hi,

did Checkpoint test vulnerability for LOM Modules which use Java?

Thanks AH

Re: Second Log4j Vulnerability (CVE-2021-45046) Discovered

_Val_ — Tue, 21 Dec 2021 07:35:22 GMT

Yes, not vulnerable.