Uploaded image for project: 'Log4j 2'
  1. Log4j 2
  2. LOG4J2-3201

Limit the protocols JNDI can use and restrict LDAP.

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 2.15.0
    • Core
    • None

    Description

      LDAP needs to be limited in the servers and classes it can access. JNDI should only support the java, ldap, and ldaps protocols by default.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. LOG4J2-3242 Limit JNDI to the java protocol only

          • Major - Major loss of function.
          • Closed

          Activity

            People

              Unassigned Unassigned
              rgoers Ralph Goers
              Votes:
              0 Vote for this issue
              Watchers:
              18 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: