Comments (11)
romw
commented on June 1, 2024
1
A new build is up with a possible fix for this issue when ML is in use.
See:
https://github.com/Qualys/log4jscanwin/releases/download/1.2.17/Log4jScanner-1.2.17.zip
Sorry about the wait, our code-signing cert vendor is having some hiccups and we were having to jump through a few hoops. I suspect it has been a stressful week across the industry.
Please create a new ticket if this doesn't resolve the issue for any one of you.
Thanks in advance.
from log4jscanwin.
romw
commented on June 1, 2024
Which POD is your agents connected to? I need to double check on the status of the VM manifest deployment for that POD.
from log4jscanwin.
MilesinCSAA
commented on June 1, 2024
We are also seeing this issue. any kind of fix? I think our POD is us3.
from log4jscanwin.
ufxl070
commented on June 1, 2024
Don't know for the POD used...
from log4jscanwin.
borom
commented on June 1, 2024
We are seeing the same issue. We are on POD 2.
from log4jscanwin.
MilesinCSAA
commented on June 1, 2024
@romw see you added a comment and code change that might address this issue. should we re-run the script and scan for the QID?
from log4jscanwin.
romw
commented on June 1, 2024
@MilesinCSAA I've built a new version of the tool, I'm waiting on one of our internal teams to code-sign the tool so Windows Defender won't go crazy when people try to use the utility. Hopefully I'll have an update posted in a couple of hours.
from log4jscanwin.
MilesinCSAA
commented on June 1, 2024
Thank you so much for your support Rom.
From: Rom Walton ***@***.***>
Sent: Friday, December 17, 2021 4:56 PM
To: Qualys/log4jscanwin ***@***.***>
Cc: Rogers Jr, Miles ***@***.***>; Mention ***@***.***>
Subject: [EXTERNAL] Re: [Qualys/log4jscanwin] QID 376160 not logged in Qualys console (Issue #3)
Caution: This email originated from outside the company. Do not click links, open attachments, or forward unless you recognize the sender and verify the content is safe. Please report anything suspicious using the Report Phishing button or call the IT Service Desk.
@MilesinCSAA<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMilesinCSAA&data=04%7C01%7Cmiles.rogers%40csaa.com%7Cbc53d75993b5468a3a5008d9c1b8d55b%7C1345b410969446f39c42132a582646b5%7C0%7C0%7C637753821879965248%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=jKrQ6f03%2FXWxeOs1AiTiRuIN7loC7qADgywvM8VTHz8%3D&reserved=0> I've built a new version of the tool, I'm waiting on one of our internal teams to code-sign the tool so Windows Defender won't go crazy when people try to use the utility. Hopefully I'll have an update posted in a couple of hours.
-
Reply to this email directly, view it on GitHub<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FQualys%2Flog4jscanwin%2Fissues%2F3%23issuecomment-997097232&data=04%7C01%7Cmiles.rogers%40csaa.com%7Cbc53d75993b5468a3a5008d9c1b8d55b%7C1345b410969446f39c42132a582646b5%7C0%7C0%7C637753821880121465%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2FWXfwy382OLHFTw7TgRFn5wF2FTacsAoebnuyA4HPeY%3D&reserved=0>, or unsubscribe<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAW62I4FHEAGACA5JRFLX253URPE2RANCNFSM5KJB4KBQ&data=04%7C01%7Cmiles.rogers%40csaa.com%7Cbc53d75993b5468a3a5008d9c1b8d55b%7C1345b410969446f39c42132a582646b5%7C0%7C0%7C637753821880121465%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2FtB2vhyL9rSOC7Rvy1R2kDV0zGFTQsdLiM93gDl1Avc%3D&reserved=0>.
Triage notifications on the go with GitHub Mobile for iOS<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fapp%2Fapple-store%2Fid1477376905%3Fct%3Dnotification-email%26mt%3D8%26pt%3D524675&data=04%7C01%7Cmiles.rogers%40csaa.com%7Cbc53d75993b5468a3a5008d9c1b8d55b%7C1345b410969446f39c42132a582646b5%7C0%7C0%7C637753821880121465%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=m6fRNiGwzGaaeZ98PY6Nn4kRxvbU9XWgP%2F78Puyn2YM%3D&reserved=0> or Android<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.github.android%26referrer%3Dutm_campaign%253Dnotification-email%2526utm_medium%253Demail%2526utm_source%253Dgithub&data=04%7C01%7Cmiles.rogers%40csaa.com%7Cbc53d75993b5468a3a5008d9c1b8d55b%7C1345b410969446f39c42132a582646b5%7C0%7C0%7C637753821880121465%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=vvBxwQJ3lr0CL8gtHbY1N8CAK7LMtaNHzP2LXEA5FRc%3D&reserved=0>.
You are receiving this because you were mentioned.Message ID: ***@***.***>
This message may contain information, including personally identifiable information that is confidential, privileged, or otherwise legally protected. If you are not the intended recipient, please immediately notify the sender and delete this message without copying, disclosing, or distributing it.
from log4jscanwin.
surbo
commented on June 1, 2024
@romw I've built a new version of the tool, I'm waiting on one of our internal teams to code-sign the tool so Windows Defender won't go crazy when people try to use the utility. Hopefully I'll have an update posted in a couple of hours.
Romw-
Any update on getting the package pushed out?
from log4jscanwin.
johnmccash
commented on June 1, 2024
Is that why the 1.2.17 prerelease package doesn't have a compiled exe in it?
from log4jscanwin.
johnmccash
commented on June 1, 2024
Any possibility of getting this soon, or will we all have to wait for Monday? Is the team that handles code-signing available over the weekend?
from log4jscanwin.
Related Issues (20)
- Scan Results Not getting saved HOT 5
- No Summary after Errors HOT 1
- Feature-Request: Throttling
- Log4JScanner does not scan mountpoints
- Getting errors when running with /report_sig HOT 2
- Allow run of /report and /report_sig together
- Question: encoding problem when GenerateJSONReport function is used
- Out Of Memory (C++ Exception) HOT 8
- Commit https://github.com/Qualys/log4jscanwin/commit/d7b27613f717027e244498892cc530f754560c0c breaks the /lowpriority switch on 64-bit systems. HOT 2
- Exclude from scan parameter HOT 1
- Scan finds issue - remediate finds none HOT 3
- CVE-2021-4104 QID
- Rescan Function
- network_scan option does not find any network drives
- How can I get a report? HOT 1
- Issue with a false positive on log4j-1.2-api-2.17.1.jar files
- Agent not picking up log4j_findings.out HOT 1
- exclude multiple directories from scan
- report_pretty switch shows nothing regardless of the scan results
- Unable to parse signature report C:\ProgramData\Qualys\log4j_findings.out: The data is invalid.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from log4jscanwin.