tocsin

CVE-2020-9488

2 advisories.

Maven/org.apache.logging.log4j:log4j CVE-2020-9488: low 3.7, EPSS 8.22%

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

Action: Upgrade org.apache.logging.log4j:log4j to 2.3.2 (2.3.x), 2.12.3 (2.12.x) or 2.13.2 (2.13.x) or later.

Affected

introducedfixedlast affected
2.13.02.13.2-
2.4.02.12.3-
02.3.2-

Fixed versions

2.13.22.12.32.3.2

Sources

CVE-2020-9488 · published · modified · JSON

Maven/org.apache.logging.log4j:log4j-core CVE-2020-9488: low 3.7, EPSS 8.22%

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

Action: Upgrade org.apache.logging.log4j:log4j-core to 2.3.2 (2.3.x), 2.12.3 (2.12.x) or 2.13.2 (2.13.x) or later.

Affected

introducedfixedlast affected
2.13.02.13.2-
2.4.02.12.3-
02.3.2-

Fixed versions

2.13.22.12.32.3.2

Sources

CVE-2020-9488 · published · modified · JSON