cPanel Plugin Contains Log4j Vulnerability

Cpanel

cPanel Plugin Contains Log4j Vulnerability

Recently, one of the most popular control panels named cPanel released a patch to correct a flaw in the log4j Java library. However, the vulnerability is known as Log4Shell and is also described as a catastrophic vulnerability by researchers.

Does Log4j (CVE-2021–44228) affect cPanel?

Yes, you have to uninstall the cPanel solr plugin because it is vulnerable. However, an update in version 8.8.2–4+ has been announced to mitigate CVE-2021–44228 to the Cpanel-devecot-solr RPM.

Read More: https://www.temok.com/blog/cpanel-log4j-vulnerability/