article thumbnail

Log4j 2 Vulnerability: Identifying and Minimizing Production Risk

Dynatrace

The National Vulnerability Database describes the exploit here. It results in remote code execution (RCE) by submitting a specially composed request. Sensitive Data Access – Do the vulnerable Java processes access critical databases or file systems in the environment? Dynatrace news. Public Internet Exposure.

Java 242
article thumbnail

Why the supposedly fixed CVE-2020-36641 vulnerability is still exploitable—And what to do about it

Dynatrace

In May 2023 the critical vulnerability CVE-2020-36641 in the Java library aXMLRPC was published in the National Vulnerability Database (NVD). To what extent attacks are possible depends on the Java version and other environmental factors. This PoC has been validated for versions 1.12.1

Java 211
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Kubernetes Observability: Code Profiling With Flame Graphs

Percona

It shows which code paths are more busy on the CPU in given samples. The documentation mentions that the supported languages to profile are Go, Java (any JVM-based language), Python, Ruby, and NodeJS. In this blog post, we’ll review how to run Linux profilers such as perf and produce flame graphs on Kubernetes environments.

Code 109
article thumbnail

Log4Shell vulnerability: Identifying and minimizing production risk

Dynatrace

The National Vulnerability Database describes the vulnerability here. It results in remote code execution (RCE) by submitting a specially composed request. Sensitive Data Access – Do the vulnerable Java processes access critical databases or file systems in the environment? Dynatrace news. Public Internet Exposure.

Java 189
article thumbnail

Unmatched scalability and security of Dynatrace extensions now available for all supported technologies: 7 reasons to migrate your JMX and Python plugins

Dynatrace

already address SNMP, WMI, SQL databases, and Prometheus technologies, serving the monitoring needs of hundreds of Dynatrace customers. focused on technology coverage, building on the flexibility of JMX for Java and Python-based coded extensions for everything else. and focusing on a much-improved version 2.0 Extensions 2.0

article thumbnail

Dynatrace with industry consortium submits OpenFeature standard as CNCF sandbox project

Dynatrace

They enable product delivery and SRE teams to turn functionality on and off at runtime without deploying new code. This decoupling of code deployment from feature release is a crucial enabler for modern Continuous Delivery practices. Proprietary SDKs create adoption challenges. SDKs are lightweight, developer friendly, and flexible.

Java 262
article thumbnail

Mastering MongoDB® Timeout Settings

Scalegrid

How the MongoDB timeout is set up can significantly affect your application’s performance, no matter if you are an experienced MongoDB user or just starting with NoSQL databases. Typical applications are interacting with different database servers based on the business logic. x+ in Java).

Java 130