This video covers the latest Log4J vulnerabilities and the steps to remediate them in your Java applications
📌 Chapter Timestamps
===================
00:00 - Agenda
00:55 - What is log4j vulnerability?
02:08 - 0-day vulnerability and affected versions
03:06 - What does the vulnerability do?
07:11 - What are the Tactical fixes?
08:52 - What is the Strategic fix
10:58 - How to find if my application has the log4j-core jar?
13:33 - Summary
📌 Reference Links
=================
🔗 CVE : https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228
🔗 CloudFlare blog: https://blog.cloudflare.com/how-cloudflare-security-responded-to-log4j2-vulnerability/
🔗 CloudFlare deepdive: https://blog.cloudflare.com/inside-the-log4j2-vulnerability-cve-2021-44228/
🔗 CloudFlare 0-day plan: https://blog.cloudflare.com/cve-2021-44228-log4j-rce-0-day-mitigation/
🔗 Trusec: https://www.truesec.com/hub/blog/apache-log4j-injection-vulnerability-cve-2021-44228-impact-and-response
📌 Related Links
=============
🔗 Terraform Getting Started: https://youtu.be/YXCuqueNQHk
🔗 Terraform Architecture: https://youtu.be/a_IgGCEXAjQ
🔗 Terraform setup: https://www.terraform.io/downloads.html
🔗 Github code: https://github.com/TechPrimers/terraform-primer
🔗 Terraform Providers: https://registry.terraform.io/browse/providers
📌 Related Playlist
================
🔗 Terraform Playlist - https://youtube.com/playlist?list=PLTyWtrsGknYcFBpNMcaRL9riUZSfkEON_
🔗Spring Boot Primer - https://www.youtube.com/playlist?list=PLTyWtrsGknYegrUmDZB6rcqMotOFZKvbn
🔗Spring Cloud Primer - https://www.youtube.com/playlist?list=PLTyWtrsGknYeOJHtd3Ll93GRf28hrjlHV
🔗Spring Microservices Primer - https://www.youtube.com/playlist?list=PLTyWtrsGknYdZlO7LAZFEElWkEk59Y2ak
🔗Spring JPA Primer - https://www.youtube.com/playlist?list=PLTyWtrsGknYdt079e1pyvpgLrJ48RQ1LK
🔗Java 8 Streams - https://www.youtube.com/playlist?list=PLTyWtrsGknYdqY_7lwcbJ1z4bvc5yEEZl
🔗Spring Security Primer - https://www.youtube.com/playlist?list=PLTyWtrsGknYe0Sba9o-JRtnRlkl4gXMQl
💪 Join TechPrimers Slack Community: https://bit.ly/JoinTechPrimers
📟 Telegram: https://t.me/TechPrimers
🧮 TechPrimer HindSight (Blog): https://medium.com/TechPrimers
☁️ Website: http://techprimers.com
💪 Slack Community: https://techprimers.slack.com
🐦 Twitter: https://twitter.com/TechPrimers
📱 Facebook: http://fb.me/TechPrimers
💻 GitHub: https://github.com/TechPrimers or https://techprimers.github.io/
🎬 Video Editing: FCP
---------------------------------------------------------------
🔥 Disclaimer/Policy:
The content/views/opinions posted here are solely mine and the code samples created by me are open sourced.
You are free to use the code samples in Github after forking and you can modify it for your own use.
All the videos posted here are copyrighted. You cannot re-distribute videos on this channel in other channels or platforms.
#log4j #Vulnerabilities #TechPrimers
0 Comments