On Friday, December 10, 2021, a vulnerability for Log4j was announced in CVE-2021-44228.   Log4j is developed by the Apache Foundation and is widely used by both enterprise apps and cloud services. It was reported by Alibaba Cloud’s security team to Apache on November 24. They also revealed that CVE-2021-44228 impacts default configurations of multiple Apache frameworks, including Apache Struts2, Apache Solr, Apache Druid, Apache Flink, and others. The United States Cybersecurity and Infrastructure Security …

The post The Apache Log4j exploit and how to protect your cPanel server first appeared on cPanel Blog.