huge breaking news at BP:
- BP to exit its 20% stake in Russian oil giant Rosneft
- BP chief executive Bernard Looney to resign from board of Rosneft with immediate effect
The JNDI serialization rabbit hole goes deep and leads to very inconvenient conclusions. The conclusions have nothing to do with logging.😟
Still investigating and hope to be wrong.
How to test your apps for #log4shell vulnerability
1. Generate a DNS token https://t.co/vCzVG0O03i
2. Wrap that token in
Prefix: ${jndi:ldap://
Suffix: /a}
3. Use that value in search forms, profile data, settings etc. of your apps
4. Get notified when you triggered a reaction