Uploaded image for project: 'Log4j 2'
  1. Log4j 2
  2. LOG4J2-3201

Limit the protocols JNDI can use and restrict LDAP.

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 2.15.0
    • Core
    • None

    Description

      LDAP needs to be limited in the servers and classes it can access. JNDI should only support the java, ldap, and ldaps protocols by default.

      Attachments

        Activity

          People

            Unassigned Unassigned
            rgoers Ralph Goers
            Votes:
            0 Vote for this issue
            Watchers:
            18 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: