¿ËÈÕ£¬£¬£¬£¬£¬3377ÌåÓýÍø¹ÙÍøÈë¿Ú°¢¶û·¨ÊµÑéÊÒ¼à²âµ½»¥ÁªÍøÉϹûÕæÐû²¼Á˹ØÓÚ Log4j2í§Òâ´úÂëÖ´ÐÐÎó²îµÄʹÓôúÂë¡£¡£¡£¡£¡£¡£¡£Log4j2Öб£´æJNDI×¢ÈëÎó²î£¬£¬£¬£¬£¬µ±³ÌÐò½«¿Í»§ÊäÈëµÄÊý¾Ý¾ÙÐÐÈÕÖ¾¼Í¼ʱ£¬£¬£¬£¬£¬¼´¿É´¥·¢´ËÎó²î£¬£¬£¬£¬£¬ÀÖ³ÉʹÓôËÎó²î¿ÉÒÔÔÚÄ¿µÄ·þÎñÆ÷ÉÏÖ´ÐÐí§Òâ´úÂë¡£¡£¡£¡£¡£¡£¡£¸Ã×é¼þÓ¦ÓùæÄ£ºÜÊÇÆձ飬£¬£¬£¬£¬È磺Apache Struts2¡¢Apache Solr¡¢Apache DruidµÈ¿ª·¢¿ò¼Ü¼°ÖÐÐļþÖУ¬£¬£¬£¬£¬Îó²îÏà¹Øϸ½ÚÓëPOCÒÑÔÚ»¥ÁªÍø¹ûÕ棬£¬£¬£¬£¬Îó²îʹÓüòÆÓ£¬£¬£¬£¬£¬Î£º¦Öش󣬣¬£¬£¬£¬½¨Òé¿Í»§¾¡¿ì¿ªÕ¹×Բ鲢¸üÐÂÖÁ×îа汾»òÆôÓÃÇå¾²·À»¤²úÆ·ÒÔ·ÀÓùÎó²î¡£¡£¡£¡£¡£¡£¡£

¸ÃÎó²îÀíÂÛÉÏÀ´½²ÊÇlog4j2×Ô¼ºµÄÕý³£¹¦Ð§£¬£¬£¬£¬£¬Ö»ÊǸù¦Ð§±»¶ñÒâʹÓᣡ£¡£¡£¡£¡£¡£Òªº¦µã´ÓMessagePatternConverter.formatÒªÁì×îÏÈ£¬£¬£¬£¬£¬Ê×ÏȸÃÒªÌå»áÅжÏÊäÈëµÄ×Ö·û´®ÖÐÊÇ·ñ°üÀ¨"${"

ÈôÊDZ£´æÔò»á½øÈëÅжÏÖУ¬£¬£¬£¬£¬Å²ÓÃconfig.getStrSubstitutor().replace(event, value)£¬£¬£¬£¬£¬ÎÊÌâconfig.getStrSubstitutor().replace(event, value)£¬£¬£¬£¬£¬config.getStrSubstitutor()Ö´ÐÐÍê³Éºó·µ»ØÒ»¸öStrSubstitutor¹¤¾ß£¬£¬£¬£¬£¬½ô½Ó×ÅŲÓÃStrSubstitutor.replaceÒªÁ죬£¬£¬£¬£¬È»ºóÔÚ¸ÃÒªÁìÖÐÓÖŲÓÃÁËsubstituteÒªÁì¡£¡£¡£¡£¡£¡£¡£

¸ÃÎó²î»á½«"${}"ÖеÄÄÚÈÝ¿´³É±í´ïʽ£¬£¬£¬£¬£¬´Ó¶ø¾ÙÐÐÔ¶³Ì¼ÓÔØ£¬£¬£¬£¬£¬ÔÚÕâÀïlog4j2µÄ±¾ÒâÓ¦¸ÃÊǽ«ldap·þÎñÆ÷ÉϸõØÖ·ÖÐËù¼Í¼µÄ¹¤¾ß¼ÓÔص½ÍâµØ£¬£¬£¬£¬£¬À´¾ÙÐÐÒ»¸ö×Ö·û´®Ìæ»»¡£¡£¡£¡£¡£¡£¡£ÏêϸµÄŲÓÃÕ»ÈçÏ£º

ÊÜÓ°Ïì°æ±¾¼°Ïà¹Ø²úÆ·

ÊÜÓ°Ïì°æ±¾

Apache log4j2 2.* <= Apache log4j2 2.15.1.rc1

Ö÷Á÷Ïà¹Ø²úÆ·

Spring-Boot-strater-log4j2

Apache Struts2

Apache Solr

Apache Flink

Apache Druid

ElasticSearch

Flume

Dubbo

Redis

¸ü¶à×é¼þ¿É²Î¿¼ÈçÏÂÁ´½Ó£º

https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core/usages?p=1

Îó²î¼ì²âÒªÁì

ÊÖ¶¯¼ì²â

1.°×ºÐµÄÇéÐÎÏ¿ÉÒÔ¿´´úÂëÓÐûÓÐʹÓõ½Log4j2µÍ°æ±¾µÄjar°üÀ´¿ìËÙÅжÏ¡£¡£¡£¡£¡£¡£¡£ÒÔMaven¹¹½¨µÄÏîĿΪÀý£¬£¬£¬£¬£¬¿ÉÒÔÉó²éÆäpom.xmlÖÐÊÇ·ñÌí¼ÓÁ˵Ͱ汾log4j2µÄÒÀÀµ¡£¡£¡£¡£¡£¡£¡£

2. ʹÓúںвâÊÔ²åÈëPOC²âÊÔÏà¹Ø¹¦Ð§µãÊÇ·ñ±£´æÎó²î¡£¡£¡£¡£¡£¡£¡£

3377ÌåÓýÍø¹ÙÍøÈë¿Ú²úÆ·¼ì²â

# 3377ÌåÓýÍø¹ÙÍøÈë¿ÚųÈõÐÔɨÃèÓë¹ÜÀíϵͳ #

3377ÌåÓýÍø¹ÙÍøÈë¿ÚųÈõÐÔɨÃèÓë¹ÜÀíϵͳ¼¯³ÉÁËϵͳ©ɨ¡¢Web©ɨ¡¢Êý¾Ý¿â©ɨ¡¢Èõ¿ÚÁî¼ì²â¡¢»ùÏߺ˲éµÈ¹¦Ð§£¬£¬£¬£¬£¬´Ó¶à½Ç¶È¾ÙÐÐÐÅÏ¢×ʲúµÄųÈõÐÔÉó¼Æ£¬£¬£¬£¬£¬ÌṩרҵµÄÇå¾²ÆÊÎöºÍÐÞ²¹½¨Òé¡£¡£¡£¡£¡£¡£¡£

ÏÖÔÚ3377ÌåÓýÍø¹ÙÍøÈë¿ÚųÈõÐÔɨÃèÓë¹ÜÀíϵͳÒѽôÆȸüÐÂLog4j2í§Òâ´úÂëÖ´ÐÐÎó²î¼ì²é²å¼þ£¬£¬£¬£¬£¬×ÊÖú¿Í»§¾ÙÐÐÎó²îÅŲé¡£¡£¡£¡£¡£¡£¡£

ÅŲ齨Òé

3377ÌåÓýÍø¹ÙÍøÈë¿ÚųÈõÐÔɨÃèÓë¹ÜÀíϵͳÕë¶Ô´ËÎó²îµÄ¹æÔò¿â¸üÐÂÈçÏÂͼ£º

3377ÌåÓýÍø¹ÙÍøÈë¿ÚųÈõÐÔɨÃèÓë¹ÜÀíϵͳÕë¶Ô¸ÃÎó²î¼ì²éЧ¹ûÈçÏÂͼËùʾ £º

ÅŲéÒªÁì

1. ÔÚÏß×Ô¶¯Éý¼¶£¬£¬£¬£¬£¬ÔÚ¡°³¬µÈ¹ÜÀíÔ±¡±Õ˺š¾ÏµÍ³¹ÜÀí¡¿¡ú¡¾²å¼þ¿âÉý¼¶¡¿¡ú¡¾Á¬Ã¦¸üС¿¡úÁ¬Ã¦Éý¼¶¡£¡£¡£¡£¡£¡£¡£

2.½¨ÉèÎó²îɨÃèʹÃü£¬£¬£¬£¬£¬É¨ÃèÍê³ÉºóÉó²é±¨¸æ£¬£¬£¬£¬£¬Èç±£´æ¸ÃÎó²î£¬£¬£¬£¬£¬¿Éƾ֤±¨¸æÖеÄÐÞ¸´½¨Òé¾ÙÐС°²¹È±¡±¡£¡£¡£¡£¡£¡£¡£

Îó²î»º½â¼Æ»®

¹Ù·½Éý¼¶

1. Apache Log4j2 2.15.1.rc1Òѱ»·¢Ã÷±£´æÈƹý£¬£¬£¬£¬£¬ÏÖÔÚÐè¸üÐÂÖÁ×îа汾2.15.1.rc2£¬£¬£¬£¬£¬ÏÂÔصØÖ·ÈçÏ£º

https://github.com/apache/logging-log4j2/releases/tag/log4j-2.15.0-rc2

2. ½¨Òé¶ÔÏà¹ØÁªÖ÷Á÷²úÆ·Èç Apache Struts2/Apache Solr/Apache Flink/Apache Druid µÈÒÑÖªÊÜÓ°ÏìµÄÓ¦Óü°×é¼þ¾ÙÐÐÉý¼¶

ÔÝʱ·À»¤²½·¥

1.ÔÚÏîÄ¿ÖÐÌí¼Ólog4j2.component.propertiesÎļþ£¬£¬£¬£¬£¬ÔÚÆäÖÐдÈëÄÚÈÝlog4j2.formatMsgNoLookups=true

2. Ìí¼ÓjvmÆô¶¯²ÎÊý£º

-Dlog4j2.formatMsgNoLookups=true

3. ϵͳÇéÐαäÁ¿ FORMAT_MESSAGES_PATTERN_DISABLE_LOOKUPS ÉèÖÃΪtrue

4. ¹Ø±Õ¶ÔÓ¦Ó¦ÓõÄÍøÂçÍâÁ¬£¬£¬£¬£¬£¬Õ¥È¡×Ô¶¯ÍâÁ¬¡£¡£¡£¡£¡£¡£¡£

3377ÌåÓýÍø¹ÙÍøÈë¿Ú²úÆ··À»¤

3377ÌåÓýÍø¹ÙÍøÈë¿ÚÏÂÒ»´ú·À»ðǽ¡¢UTM¡¢WAF¡¢IPS¡¢IDS¡¢½©Ä¾ÈäµÈ²úÆ·¹æÔò¿â¾ùÒÑÉý¼¶Íê±Ï£¬£¬£¬£¬£¬¿ÉµÇ¼ftp://ftp.topsec.com.cnÉý¼¶ÖÐÐÄÏÂÔØ×îÐÂÉý¼¶°ü¡£¡£¡£¡£¡£¡£¡£

ÏÂÒ»´ú·À»ðǽ²úÆ·£¨NGFW£©¡¢UTM²úÆ·

3377ÌåÓýÍø¹ÙÍøÈë¿ÚÒѾ­½ôÆÈÐû²¼ÌØÕ÷¿âÉý¼¶°ü£¨ips-v2021.12.10.tir£©£¬£¬£¬£¬£¬¿Éͨ¹ýÔÚÏßÉý¼¶»òÀëÏßÉý¼¶µÄ·½·¨£¬£¬£¬£¬£¬¼´¿É¶Ô´Ë¹¥»÷¾ÙÐмì²âºÍ·À»¤¡£¡£¡£¡£¡£¡£¡£

µã»÷¡¾ÏµÍ³¹ÜÀí¡¿¡ú¡¾ÏµÍ³Î¬»¤¡¿¡ú¡¾ÏµÍ³¸üС¿¡ú¡¾¹æÔò¿âÉý¼¶¡¿£¬£¬£¬£¬£¬Ñ¡Ôñ¡°ÈëÇÖ·ÀÓùÌØÕ÷¿â¡±ºóµã»÷¡°µ¼È롱¡£¡£¡£¡£¡£¡£¡£

Éý¼¶ºó¿ÉÒýÓÃÏà¹ØÎó²î¹æÔò£º

WebÓ¦Ó÷À»ðǽ²úÆ·£¨TopWAF£©

3377ÌåÓýÍø¹ÙÍøÈë¿ÚÒѾ­½ôÆÈÐû²¼ÌØÕ÷¿âÉý¼¶°ü£¨waf-v2021.12.10£©£¬£¬£¬£¬£¬¿Éͨ¹ýÔÚÏßÉý¼¶»òÀëÏßÉý¼¶µÄ·½·¨£¬£¬£¬£¬£¬¼´¿É¶Ô´Ë¹¥»÷¾ÙÐмì²âºÍ·À»¤¡£¡£¡£¡£¡£¡£¡£

µã»÷¡¾ÏµÍ³¹ÜÀí¡¿¡ú¡¾ÏµÍ³Î¬»¤¡¿¡ú¡¾¹æÔò¿âÉý¼¶¡¿£¬£¬£¬£¬£¬¹´Ñ¡¡°WAF¹æÔò¿â¡±¸´Ñ¡¿ò£¬£¬£¬£¬£¬µã»÷¡°µ¼È롱¡£¡£¡£¡£¡£¡£¡£

Éý¼¶ºó¿ÉÒýÓÃÏà¹ØÎó²î¹æÔò£º

ÈëÇÖ¼ì²â²úÆ·£¨TopSentry£©¡¢ÈëÇÖ·ÀÓù²úÆ·£¨TopIDP£©¡¢½©Ä¾Èä¼ì²â²úÆ·£¨TopTVD£©

3377ÌåÓýÍø¹ÙÍøÈë¿ÚÒѾ­½ôÆÈÐû²¼ÌØÕ÷¿âÉý¼¶°ü£¨ips-v2021.12.10.tir¡¢ngips-v2021.12.10.003.tor£©£¬£¬£¬£¬£¬¿Éͨ¹ýÔÚÏßÉý¼¶»òÀëÏßÉý¼¶µÄ·½·¨£¬£¬£¬£¬£¬¼´¿É¶Ô´Ë¹¥»÷¾ÙÐмì²âºÍ·À»¤¡£¡£¡£¡£¡£¡£¡£

µã»÷¡¾ÏµÍ³¡¿¡ú¡¾¹æÔò¿âÉý¼¶¡¿£¬£¬£¬£¬£¬Ñ¡Ôñ¡°¹¥»÷¼ì²â¹æÔò¿â¡±µÄ¸´Ñ¡¿òºó£¬£¬£¬£¬£¬µã»÷¡°µ¼È롱¡£¡£¡£¡£¡£¡£¡£

Éý¼¶ºó¿ÉÒýÓÃÏà¹ØÎó²î¹æÔò£º

3377ÌåÓýÍø¹ÙÍøÈë¿ÚÔƶ˷þÎñÉêÇë

3377ÌåÓýÍø¹ÙÍøÈë¿ÚÇå¾²ÔÆ·þÎñÒÀÍÐÔƶ˴óÊý¾Ýƽ̨£¬£¬£¬£¬£¬ÍŽáÌìÏ°²ÅŵÄ̽Õë½Úµã¼°ÔÆ·þÎñÔËÓªÍŶÓ£¬£¬£¬£¬£¬7x24СʱΪ¿Í»§Ìṩ»ùÓÚSaaSµÄÍøÂç×ʲú²â»æ¡¢ÍøÕ¾¼à²â¡¢ÔÆ·À»¤ÒÔ¼°ÍþвÇ鱨ÆÊÎöµÈ·þÎñ¡£¡£¡£¡£¡£¡£¡£

ÏÖÔÚ3377ÌåÓýÍø¹ÙÍøÈë¿ÚÇå¾²ÔÆ·þÎñƽ̨ÒѾ߱¸¶ÔApache Log4j2Ô¶³Ì´úÂëÖ´ÐÐÎó²îµÄÔ¶³Ì¼ì²âºÍ·À»¤ÄÜÁ¦¡£¡£¡£¡£¡£¡£¡£

×ʲú̻¶Ãæ¼ì²â·þÎñ£º¶ÔÄ¿µÄÍøÂç¿ìËÙ¡¢ÖÜÈ«µÄ̽²â£¬£¬£¬£¬£¬Ê¶±ðÊÜ¡°Log4j2¡±°æ±¾Ó°ÏìµÄ×ʲúÐÅÏ¢£¬£¬£¬£¬£¬¿ìËÙÏàʶΣº¦×ʲúÂþÑܼ°×°±¸ÏêÇé¡£¡£¡£¡£¡£¡£¡£

ÔƼì²â·þÎñ£ºÏßÉϽÓÈ룬£¬£¬£¬£¬µÚһʱ¼ä¶Ô¿Í»§ÍøÂçÇéÐξÙÐÐÎó²îɨÃ裬£¬£¬£¬£¬¿ìËÙÅŲéÊÇ·ñ±£´æ´ËÎó²î£¬£¬£¬£¬£¬Ç徲ר¼ÒÔ¶³ÌÌṩÐÞ¸´Ö§³Ö¡£¡£¡£¡£¡£¡£¡£

ÔÆWAF·À»¤£º»ùÓÚAIµÄһվʽWebӪҵΣº¦·À»¤·þÎñ£¬£¬£¬£¬£¬Äܹ»ÊµÊ±±£»£»£»£»£»£»£»¤ÍøÕ¾Çå¾²£¬£¬£¬£¬£¬Ìá¸ßWebÕ¾µãµÄÇå¾²ÐԺͿɿ¿ÐÔ¡£¡£¡£¡£¡£¡£¡£ÏÖÔÚÒÑÉý¼¶¹æÔò²¢¾ß±¸¶Ô¸ÃÎó²îµÄ·À»¤ÄÜÁ¦¡£¡£¡£¡£¡£¡£¡£

ÏêÇé¿É×Éѯ3377ÌåÓýÍø¹ÙÍøÈë¿ÚÍâµØÏúÊÛ£¬£¬£¬£¬£¬»òͨ¹ý¹«Ë¾ÓÊÏ䣬£¬£¬£¬£¬Óʼþ·¢ËÍÖÁ£º

zhangkai@topsec.com.cn

yan_songqi@topsec.com.cn

×ÉѯÈÈÏߣº

18310916559¡¢13718958574