Log4j proof

[holly_wilsey]

Troy posted a SQL query here that includes the proof, along with a lot of other info about the host and the vulnerability. Hopefully that provides you with a solid start, at least.

Log4j CVE-2021-44228

@JuiceBox we all have been there. I would suggest using the nexpose out-of-the-box SQL samples, a cup of coffee or tea and so searching the internet for examples. You can cut and paste and create some SQL masterpieces with some headbanging on the wall and some time. Below I started this out with one of the examples in nexpose called vulnerability details, then removed what I did not want(removed sites because I am scoping to asset group), Then added in what I did want. 2 key things on this one…