Red Hat Data Grid 8/log4j-core
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Apache Log4j Core: `verifyHostName` attribute silently ignored in TLS configuration | org.apache.logging.log4j:log4j-coreRed Hat AI Inference Server/redhat-user-workloads/rhaiis-cuda-ubi9-3-2-2 | MavenRed Hat | Medium | Fix reported | |
| Apache Log4j does not verify the TLS hostname in its Socket Appender | org.apache.logging.log4j:log4j-coreLogging Subsystem for Red Hat OpenShift/log4j-core | MavenRed Hat | Medium | Fix reported | |
| org.apache.logging.log4j/log4j-core: org.springframework.amqp/spring-amqp: Log4j2 AMQP Appender: Information disclosure due to disabled TLS hostname verification | Red Hat AI Inference Server/rhaii/vllm-gaudi-rhel9Red Hat AI Inference Server/rhaiis/vllm-cuda-rhel9 | Red Hat | Medium | No fix reported |