News for hackers. Stuff that matters.

A comment on New Log4j2 vulnerability.

Re:New Log4j2 vulnerability by bjornsing on Tuesday December 28, 2021 @06:45PM (#29719755)
Why do they say it’s a RCE (Remote Code Execution) if it requires changing a configuration file?
[ Parent | on HN ]
Re:New Log4j2 vulnerability by MattPalmer1086 on Wednesday December 29, 2021 @09:25AM (#29725045)
Changing the config enables the RCE vulnerability.
[ Parent | on HN ]