From 1267eba45041eb4b8fb441968d21a26d09d5492e Mon Sep 17 00:00:00 2001 From: count0x00 Date: Mon, 13 Dec 2021 15:22:31 +0100 Subject: [PATCH] Topcat toegevoegd --- software/README.md | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/software/README.md b/software/README.md index 777cc3776..3e281b451 100644 --- a/software/README.md +++ b/software/README.md @@ -27,6 +27,7 @@ NCSC-NL will use the following status: | Apache | Kafka | Unknown | Workaround/Vulnerable | Only vulnerable in certain configuration |[source](https://lists.apache.org/thread/lgbtvvmy68p0059yoyn9qxzosdmx4jdv) | | Apache | SOLR | 7.4.0 to 7.7.3, 8.0.0 to 8.11.0 | Fix | Versions before 7.4 also vulnerable when using several configurations |[source](https://solr.apache.org/security.html#apache-solr-affected-by-apache-log4j-cve-2021-44228) | | Apache | Tika | 2.0.0 and up | Vulnerable | |[source](https://tika.apache.org/2.0.0/index.html) | +| Apache | Tomcat|| Vulnerable||https://www.rumble.run/blog/finding-log4j/ | Apereo | CAS | 6.3.x & 6.4.x | Fix | Other versions still in active maintainance might need manual inspection |[source](https://apereo.github.io/2021/12/11/log4j-vuln/) | | Apereo | Opencast | < 9.10, < 10.6 | Fix | |[source](https://github.com/opencast/opencast/security/advisories/GHSA-mf4f-j588-5xm8) | | Apigee | Edge and OPDK products | All version | Not vuln | |[source](https://status.apigee.com/incidents/3cgzb0q2r10p) | @@ -457,12 +458,12 @@ NCSC-NL will use the following status: |:----------------|:----------------|:---------------:|:---------------:|:----------------|-----------:| |F5| All products | |Not Vuln | F5 products themselves are not vulnerable, but F5 published guidance on mitigating through BIG-IP ASM/Advanced WAF and NGINX App Protect|[source](https://support.f5.com/csp/article/K19026212)| |FileCap| All products | <5.1.0 | Vulnerable | Fix: 5.1.1 |[source](https://mailchi.mp/3f82266e0717/filecap-update-version-511)| -Forcepoint |DLP Manager ||Workaround |[source](https://support.forcepoint.com)| -Forcepoint |Forcepoint Cloud Security Gateway (CSG) ||Not vuln |[source](https://support.forcepoint.com)| -Forcepoint |Next Generation Firewall (NGFW) ||Not vuln |[source](https://support.forcepoint.com)| -Forcepoint |Next Generation Firewall, NGFW VPN Client, Forcepoint User ID service and Sidewinder ||Not vuln |[source](https://support.forcepoint.com)| -Forcepoint |One Endpoint ||Not vuln |[source](https://support.forcepoint.com)| -Forcepoint |Security Manager (Web, Email and DLP) ||Workaround |[source](https://support.forcepoint.com)| +|Forcepoint |DLP Manager ||Workaround |[source](https://support.forcepoint.com)| +|Forcepoint |Forcepoint Cloud Security Gateway (CSG) ||Not vuln |[source](https://support.forcepoint.com)| +|Forcepoint |Next Generation Firewall (NGFW) ||Not vuln |[source](https://support.forcepoint.com)| +|Forcepoint |Next Generation Firewall, NGFW VPN Client, Forcepoint User ID service and Sidewinder ||Not vuln |[source](https://support.forcepoint.com)| +|Forcepoint |One Endpoint ||Not vuln |[source](https://support.forcepoint.com)| +|Forcepoint |Security Manager (Web, Email and DLP) ||Workaround |[source](https://support.forcepoint.com)| |ForgeRock | Autonomous Identity | | Workaround | all other ForgeRock products not vuln | [source](https://backstage.forgerock.com/knowledge/kb/book/b21824339#1_bzBa) | |Fortinet| FortiAIOps| |Vulnerable||[source](https://www.fortiguard.com/psirt/FG-IR-21-245)| |Fortinet| FortiAnalyzer Cloud| |Not Vuln||[source](https://www.fortiguard.com/psirt/FG-IR-21-245)| @@ -743,6 +744,8 @@ Forcepoint |Security Manager (Web, Email and DLP) | Parallels | Remote Application Server | All versions | Not Vuln | | [source](https://kb.parallels.com/en/128696) | | Pega | Pega Platform | On Prem | Fix | | [source](https://docs.pega.com/security-advisory/security-advisory-apache-log4j-zero-day-vulnerability) | | Planon Software | Planon Universe | all | Not vuln | | [source](https://my.planonsoftware.com/uk/news/log4j-impact-on-planon/) | +| Cyberark | PAS Self Hosted || Not Vuln | | [source](https://cyberark-customers.force.com ) |git@github.com:NCSC-NL/log4shell.git +git@github.com:NCSC-NL/log4shell.gitgit@github.com:NCSC-NL/log4shell.git31git@github.com:NCSC-NL/log4shell.git | Progress | OpenEdge | | Workaround | | [source](https://www.progress.com/security), [mitigations](https://knowledgebase.progress.com/articles/Knowledge/Is-OpenEdge-vulnerable-to-CVE-2021-44228-Log4j) | | Progress | DataDirect Hybrid Data Pipeline | | Workaround | | [source](https://www.progress.com/security), [mitigations](https://knowledgebase.progress.com/articles/Knowledge/Is-Hybrid-Data-Pipeline-vulnerable-CVE-2021-44228-Log4j) | | Pulse Secure | Pulse Secure Virtual Traffic Manager | | Not Vuln | | [source](https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44933/) |