[Blog] Automatically detecting log4j vulnerabilities in your IT

[fayepal (Faye)]

Hi everyone!

Due to the log4j exploit that was all over the new this week, there were a couple of discussions here in the forum about writing a check. @Timo condensed all the information in this guide on the Checkmk blog, available in EN and DE. Just putting it here as a quick reference.

• Automatically detecting log4j vulnerabilities in your IT
• Log4j-Schwachstellen automatisch in Ihrer IT-Infrastruktur aufspüren

Thanks @Doc, @a3093, @thl-cmk and many others who made it possible to come up with this guide!

If you want to join in the discussions around this, please refer to these topics:

Checkmk not affected by Log4shell

Dear Checkmk users, we surely don’t need to tell you what Log4shell is. Some of you will even have spent your weekend with it. Just a short update from us on the subject: Checkmk itself is not affected by the vulnerability. The Checkmk appliance is not affected by the vulnerability. We wish you all the best in these busy days.

Found file log4j?

Hello, I am seeing that the Inventory is not able to find the log4j libraries. Is there an option within the checkmk that allows locating files on the servers? Ex: “find / -name log4j *”