Vulnerability Notice - VN-2021-468 - "Log4j (CVE-2021-4104)"

[SamPirok]

Extreme Networks has reviewed and evaluated product and software exposure to CVE-2021-4104.

If Log4j 1.2 is configured to use JMSAppender, it is possible for an attacker with sufficient privileges to manifest a JNDI vulnerability similar to CVE-2021-44228.

For more details and an updated list of impacted devices, please see the official VN notification here.