Log4j and RedLine13
A zero-day vulnerability was uncovered in the ubiquitous Log4j library. This dependency is used for event logging purposes (as its name suggests). However, the vulnerability allows for remote access and code execution on affected machines. The fix is to use an updated version of this library (2.15.0 or higher) which prevents this. We conducted an internal code review at RedLine13 and we do not use Log4j (or related dependencies like Log4php) directly within our systems. JMeter does however use Log4j and thusRead More →