Skip to content
This repository has been archived by the owner on Jun 16, 2022. It is now read-only.

Commit

Permalink
Topcat toegevoegd
Browse files Browse the repository at this point in the history
  • Loading branch information
@count0x00
count0x00 committed Dec 13, 2021
1 parent 88c7192 commit 1267eba
Showing 1 changed file with 9 additions and 6 deletions.
15 changes: 9 additions & 6 deletions software/README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,7 @@ NCSC-NL will use the following status:
| Apache | Kafka | Unknown | Workaround/Vulnerable | Only vulnerable in certain configuration |[source](https://lists.apache.org/thread/lgbtvvmy68p0059yoyn9qxzosdmx4jdv) |
| Apache | SOLR | 7.4.0 to 7.7.3, 8.0.0 to 8.11.0 | Fix | Versions before 7.4 also vulnerable when using several configurations |[source](https://solr.apache.org/security.html#apache-solr-affected-by-apache-log4j-cve-2021-44228) |
| Apache | Tika | 2.0.0 and up | Vulnerable | |[source](https://tika.apache.org/2.0.0/index.html) |
| Apache | Tomcat|| Vulnerable||https://www.rumble.run/blog/finding-log4j/
| Apereo | CAS | 6.3.x & 6.4.x | Fix | Other versions still in active maintainance might need manual inspection |[source](https://apereo.github.io/2021/12/11/log4j-vuln/) |
| Apereo | Opencast | < 9.10, < 10.6 | Fix | |[source](https://github.com/opencast/opencast/security/advisories/GHSA-mf4f-j588-5xm8) |
| Apigee | Edge and OPDK products | All version | Not vuln | |[source](https://status.apigee.com/incidents/3cgzb0q2r10p) |
Expand Down Expand Up @@ -457,12 +458,12 @@ NCSC-NL will use the following status:
|:----------------|:----------------|:---------------:|:---------------:|:----------------|-----------:|
|F5| All products | |Not Vuln | F5 products themselves are not vulnerable, but F5 published guidance on mitigating through BIG-IP ASM/Advanced WAF and NGINX App Protect|[source](https://support.f5.com/csp/article/K19026212)|
|FileCap| All products | <5.1.0 | Vulnerable | Fix: 5.1.1 |[source](https://mailchi.mp/3f82266e0717/filecap-update-version-511)|
Forcepoint |DLP Manager ||Workaround |[source](https://support.forcepoint.com)|
Forcepoint |Forcepoint Cloud Security Gateway (CSG) ||Not vuln |[source](https://support.forcepoint.com)|
Forcepoint |Next Generation Firewall (NGFW) ||Not vuln |[source](https://support.forcepoint.com)|
Forcepoint |Next Generation Firewall, NGFW VPN Client, Forcepoint User ID service and Sidewinder ||Not vuln |[source](https://support.forcepoint.com)|
Forcepoint |One Endpoint ||Not vuln |[source](https://support.forcepoint.com)|
Forcepoint |Security Manager (Web, Email and DLP) ||Workaround |[source](https://support.forcepoint.com)|
|Forcepoint |DLP Manager ||Workaround |[source](https://support.forcepoint.com)|
|Forcepoint |Forcepoint Cloud Security Gateway (CSG) ||Not vuln |[source](https://support.forcepoint.com)|
|Forcepoint |Next Generation Firewall (NGFW) ||Not vuln |[source](https://support.forcepoint.com)|
|Forcepoint |Next Generation Firewall, NGFW VPN Client, Forcepoint User ID service and Sidewinder ||Not vuln |[source](https://support.forcepoint.com)|
|Forcepoint |One Endpoint ||Not vuln |[source](https://support.forcepoint.com)|
|Forcepoint |Security Manager (Web, Email and DLP) ||Workaround |[source](https://support.forcepoint.com)|
|ForgeRock | Autonomous Identity | | Workaround | all other ForgeRock products not vuln | [source](https://backstage.forgerock.com/knowledge/kb/book/b21824339#1_bzBa) |
|Fortinet| FortiAIOps| |Vulnerable||[source](https://www.fortiguard.com/psirt/FG-IR-21-245)|
|Fortinet| FortiAnalyzer Cloud| |Not Vuln||[source](https://www.fortiguard.com/psirt/FG-IR-21-245)|
Expand Down Expand Up @@ -743,6 +744,8 @@ Forcepoint |Security Manager (Web, Email and DLP)
| Parallels | Remote Application Server | All versions | Not Vuln | | [source](https://kb.parallels.com/en/128696) |
| Pega | Pega Platform | On Prem | Fix | | [source](https://docs.pega.com/security-advisory/security-advisory-apache-log4j-zero-day-vulnerability) |
| Planon Software | Planon Universe | all | Not vuln | | [source](https://my.planonsoftware.com/uk/news/log4j-impact-on-planon/) |
| Cyberark | PAS Self Hosted || Not Vuln | | [source](https://cyberark-customers.force.com ) |git@github.com:NCSC-NL/log4shell.git
git@github.com:NCSC-NL/log4shell.gitgit@github.com:NCSC-NL/log4shell.git31git@github.com:NCSC-NL/log4shell.git
| Progress | OpenEdge | | Workaround | | [source](https://www.progress.com/security), [mitigations](https://knowledgebase.progress.com/articles/Knowledge/Is-OpenEdge-vulnerable-to-CVE-2021-44228-Log4j) |
| Progress | DataDirect Hybrid Data Pipeline | | Workaround | | [source](https://www.progress.com/security), [mitigations](https://knowledgebase.progress.com/articles/Knowledge/Is-Hybrid-Data-Pipeline-vulnerable-CVE-2021-44228-Log4j) |
| Pulse Secure | Pulse Secure Virtual Traffic Manager | | Not Vuln | | [source](https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44933/) |
Expand Down

0 comments on commit 1267eba

Please sign in to comment.