CVE-2020-9488 PoC — Apache Log4j 信任管理问题漏洞

Source

https://github.com/arsalanraja987/java-log4j-cve-2020-9488

Associated Vulnerability

Title: Apache Log4j 信任管理问题漏洞 (CVE-2020-9488)
Description:Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1

Description

Demo of CVE-2020-9488: Unsafe logging with Log4j and remediation

Readme

# java-log4j-cve-2020-9488
Demo of CVE-2020-9488: Unsafe logging with Log4j and remediation

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →