Difference between revisions of "Log4j Vulnerability"
Jump to navigation
Jump to search
(Created page with "December of 2021, a vulnerability in [https://logging.apache.org/log4j/2.x/ log4j] library used by [https://solr.apache.org/ SOLR] was discovered. Here's how to mitigate it in...") |
|||
| Line 1: | Line 1: | ||
| − | December of 2021, a vulnerability in [https://logging.apache.org/log4j/2.x/ | + | December of 2021, a vulnerability in [https://logging.apache.org/log4j/2.x/ Log4j] library used by [https://solr.apache.org/ SOLR] was discovered. |
Here's how to mitigate it in Truxton: | Here's how to mitigate it in Truxton: | ||
Latest revision as of 10:44, 14 December 2021
December of 2021, a vulnerability in Log4j library used by SOLR was discovered. Here's how to mitigate it in Truxton:
- Open the TruxtonService.xml file in a text editor
- Edit the
serviceselement for SOLR - Add the
-Dlog4j2.formatMsgNoLookups=trueflag to the startup parameters
The following:
<services>{Solr 5 Server||$TextIndexerData$Search/bin/solr.cmd|start -p 8983 -m 5416m -a "-XX:-UsePerfData"|$TextIndexerData$Search/bin/solr.cmd|stop -p 8983|java.exe|jetty.port=8983},</services>
Should now be:
<services>{Solr 5 Server||$TextIndexerData$Search/bin/solr.cmd|start -p 8983 -m 5416m -a -Dlog4j2.formatMsgNoLookups=true "-XX:-UsePerfData"|$TextIndexerData$Search/bin/solr.cmd|stop -p 8983|java.exe|jetty.port=8983},</services>
