{"id":158287,"date":"2021-12-23T14:58:40","date_gmt":"2021-12-23T14:58:40","guid":{"rendered":"https:\/\/onedesk.com\/onedesk-et-la-vulnerabilite-log4j\/"},"modified":"2021-12-23T14:58:52","modified_gmt":"2021-12-23T14:58:52","slug":"onedesk-et-la-vulnerabilite-log4j","status":"publish","type":"post","link":"https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/","title":{"rendered":"OneDesk et la vuln\u00e9rabilit\u00e9 Log4j"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Une vuln\u00e9rabilit\u00e9 zero-day impactant la version 2.0&lt; = 2.14.1 du package Apache Log4j 2 a \u00e9t\u00e9 rendu public le 9 d\u00e9cembre. (Veuillez vous r\u00e9f\u00e9rer au <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2021-44228\">CVE<\/a> pour plus de d\u00e9tails.)<\/p>\n\n<p class=\"wp-block-paragraph\">Apache a publi\u00e9 une nouvelle <a href=\"https:\/\/logging.apache.org\/log4j\/2.x\/security.html\">version de Log4j<\/a> pour corriger la vuln\u00e9rabilit\u00e9. Les versions de cette biblioth\u00e8que ant\u00e9rieures \u00e0 2.15.0 sont vuln\u00e9rables \u00e0 une attaque d&#8217;ex\u00e9cution de code \u00e0 distance. Pour plus de d\u00e9tails sur la vuln\u00e9rabilit\u00e9, veuillez vous r\u00e9f\u00e9rer au CVE.<\/p>\n\n<p class=\"wp-block-paragraph\">Nous avons \u00e9tudi\u00e9 notre plate-forme Cloud SaaS et confirm\u00e9 l&#8217;utilisation des biblioth\u00e8ques log4j concern\u00e9es \u00e0 la fois dans notre propre code et dans les services d\u00e9pendants. Nous pouvons affirmer que la vuln\u00e9rabilit\u00e9 n&#8217;\u00e9tait pas exploitable sur la base des diff\u00e9rentes mesures d&#8217;att\u00e9nuation d\u00e9j\u00e0 pr\u00e9sentes dans l&#8217;environnement.<\/p>\n\n<p class=\"wp-block-paragraph\">Moins de 6 heures apr\u00e8s avoir pris connaissance de cette vuln\u00e9rabilit\u00e9, nous avons incorpor\u00e9 la biblioth\u00e8que fixe dans notre propre code (dont la publication est pr\u00e9vue) et nous avons appliqu\u00e9 en direct les att\u00e9nuations de <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2021-44228\">Mitre.org<\/a><\/p>\n\n<p class=\"wp-block-paragraph\">Nous avons \u00e9galement ajust\u00e9 les r\u00e8gles de d\u00e9tection de notre WAF et nous surveillons en permanence les sch\u00e9mas d&#8217;abus.<\/p>\n\n<p class=\"wp-block-paragraph\">Le samedi matin, nous avions publi\u00e9 des correctifs pour notre version sur site de OneDesk et avons commenc\u00e9 \u00e0 contacter nos clients sur site en leur fournissant des \u00e9tapes sur mesure pour att\u00e9nuer dans leurs propres environnements.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Une vuln\u00e9rabilit\u00e9 zero-day impactant la version 2.0&lt; = 2.14.1 du package Apache Log4j 2 a \u00e9t\u00e9 rendu public le 9 d\u00e9cembre. (Veuillez vous r\u00e9f\u00e9rer au CVE pour plus de d\u00e9tails.) Apache a publi\u00e9 une nouvelle version de Log4j pour corriger la vuln\u00e9rabilit\u00e9. Les versions de cette biblioth\u00e8que ant\u00e9rieures \u00e0 2.15.0 sont vuln\u00e9rables \u00e0 une attaque [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tpgb_global_settings":"","inline_featured_image":false,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_wpcom_ai_launchpad_first_post":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[9234],"tags":[],"class_list":["post-158287","post","type-post","status-publish","format-standard","hentry","category-non-classifiee"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.1 (Yoast SEO v28.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>OneDesk et la vuln\u00e9rabilit\u00e9 Log4j | Logiciel OneDesk<\/title>\n<meta name=\"description\" content=\"OneDesk est \u00e0 la fois helpdesk et gestion de projet. D\u00e9couvrez comment OneDesk a r\u00e9agi \u00e0 la vuln\u00e9rabilit\u00e9 Log4j ici.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OneDesk et la vuln\u00e9rabilit\u00e9 Log4j | Logiciel OneDesk\" \/>\n<meta property=\"og:description\" content=\"OneDesk est \u00e0 la fois helpdesk et gestion de projet. D\u00e9couvrez comment OneDesk a r\u00e9agi \u00e0 la vuln\u00e9rabilit\u00e9 Log4j ici.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/\" \/>\n<meta property=\"og:site_name\" content=\"OneDesk\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/OneDeskApp\" \/>\n<meta property=\"article:published_time\" content=\"2021-12-23T14:58:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-12-23T14:58:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/onedesk.com\/wp-content\/uploads\/2020\/04\/OneDesk-Logo.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"server.admin@onedesk.com\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@OneDeskApp\" \/>\n<meta name=\"twitter:site\" content=\"@OneDeskApp\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"server.admin@onedesk.com\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"OneDesk et la vuln\u00e9rabilit\u00e9 Log4j | Logiciel OneDesk","description":"OneDesk est \u00e0 la fois helpdesk et gestion de projet. D\u00e9couvrez comment OneDesk a r\u00e9agi \u00e0 la vuln\u00e9rabilit\u00e9 Log4j ici.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/","og_locale":"fr_FR","og_type":"article","og_title":"OneDesk et la vuln\u00e9rabilit\u00e9 Log4j | Logiciel OneDesk","og_description":"OneDesk est \u00e0 la fois helpdesk et gestion de projet. D\u00e9couvrez comment OneDesk a r\u00e9agi \u00e0 la vuln\u00e9rabilit\u00e9 Log4j ici.","og_url":"https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/","og_site_name":"OneDesk","article_publisher":"https:\/\/www.facebook.com\/OneDeskApp","article_published_time":"2021-12-23T14:58:40+00:00","article_modified_time":"2021-12-23T14:58:52+00:00","og_image":[{"width":1280,"height":800,"url":"https:\/\/onedesk.com\/wp-content\/uploads\/2020\/04\/OneDesk-Logo.png","type":"image\/png"}],"author":"server.admin@onedesk.com","twitter_card":"summary_large_image","twitter_creator":"@OneDeskApp","twitter_site":"@OneDeskApp","twitter_misc":{"Written by":"server.admin@onedesk.com","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/#article","isPartOf":{"@id":"https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/"},"author":{"name":"server.admin@onedesk.com","@id":"https:\/\/onedesk.com\/fr\/#\/schema\/person\/c7ed64bc5ffb65acc7bdb9017efb03c1"},"headline":"OneDesk et la vuln\u00e9rabilit\u00e9 Log4j","datePublished":"2021-12-23T14:58:40+00:00","dateModified":"2021-12-23T14:58:52+00:00","mainEntityOfPage":{"@id":"https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/"},"wordCount":247,"commentCount":0,"publisher":{"@id":"https:\/\/onedesk.com\/fr\/#organization"},"articleSection":["Non classifi\u00e9(e)"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/","url":"https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/","name":"OneDesk et la vuln\u00e9rabilit\u00e9 Log4j | Logiciel OneDesk","isPartOf":{"@id":"https:\/\/onedesk.com\/fr\/#website"},"datePublished":"2021-12-23T14:58:40+00:00","dateModified":"2021-12-23T14:58:52+00:00","description":"OneDesk est \u00e0 la fois helpdesk et gestion de projet. D\u00e9couvrez comment OneDesk a r\u00e9agi \u00e0 la vuln\u00e9rabilit\u00e9 Log4j ici.","inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/onedesk.com\/fr\/onedesk-et-la-vulnerabilite-log4j\/"]}]},{"@type":"WebSite","@id":"https:\/\/onedesk.com\/fr\/#website","url":"https:\/\/onedesk.com\/fr\/","name":"OneDesk","description":"Logiciel de gestion de projet et d'assistance","publisher":{"@id":"https:\/\/onedesk.com\/fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/onedesk.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/onedesk.com\/fr\/#organization","name":"OneDesk","url":"https:\/\/onedesk.com\/fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/onedesk.com\/fr\/#\/schema\/logo\/image\/","url":"https:\/\/onedesk.com\/wp-content\/uploads\/2016\/01\/white-logo-small.png","contentUrl":"https:\/\/onedesk.com\/wp-content\/uploads\/2016\/01\/white-logo-small.png","width":207,"height":40,"caption":"OneDesk"},"image":{"@id":"https:\/\/onedesk.com\/fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/OneDeskApp","https:\/\/x.com\/OneDeskApp","https:\/\/www.instagram.com\/onedeskapp\/","https:\/\/www.linkedin.com\/company\/onedesk-inc-1","https:\/\/www.pinterest.com\/onedesk\/","https:\/\/www.youtube.com\/user\/OneDeskApp"],"description":"OneDesk is a work management app for managing customer \/ end-user support, projects, and financials.","email":"support@onedesk.com","telephone":"1-855-663-3375","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"}},{"@type":"Person","@id":"https:\/\/onedesk.com\/fr\/#\/schema\/person\/c7ed64bc5ffb65acc7bdb9017efb03c1","name":"server.admin@onedesk.com","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/a37d6b270be81ecbf4ab9ca7260f2d1ee4d0295343706f0648e9d7a0d75243d3?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a37d6b270be81ecbf4ab9ca7260f2d1ee4d0295343706f0648e9d7a0d75243d3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a37d6b270be81ecbf4ab9ca7260f2d1ee4d0295343706f0648e9d7a0d75243d3?s=96&d=mm&r=g","caption":"server.admin@onedesk.com"},"url":"https:\/\/onedesk.com\/fr\/author\/server-adminonedesk-com\/"}]}},"tpgb_featured_images":null,"tpgb_post_meta_info":{"get_date":"December 23, 2021","get_modified_date":"December 23, 2021","category_list":{"category":[{"term_id":9234,"name":"Non classifi\u00e9(e)","slug":"non-classifiee","term_group":0,"term_taxonomy_id":9234,"taxonomy":"category","description":"","parent":0,"count":1,"filter":"raw","term_order":"0"}],"post_tag":false,"post_format":false},"author_name":"server.admin@onedesk.com","author_url":"https:\/\/onedesk.com\/fr\/author\/server-adminonedesk-com\/","author_email":"server.admin@onedesk.com","author_website":"","author_description":"","author_facebook":"","author_twitter":"","author_instagram":"","author_role":["administrator"],"author_firstname":"","author_lastname":"","user_login":"server.admin@onedesk.com","author_avatar":"<img alt='' src='https:\/\/secure.gravatar.com\/avatar\/a37d6b270be81ecbf4ab9ca7260f2d1ee4d0295343706f0648e9d7a0d75243d3?s=200&#038;d=mm&#038;r=g' srcset='https:\/\/secure.gravatar.com\/avatar\/a37d6b270be81ecbf4ab9ca7260f2d1ee4d0295343706f0648e9d7a0d75243d3?s=400&#038;d=mm&#038;r=g 2x' class='avatar avatar-200 photo' height='200' width='200' decoding='async'\/>","author_avatar_url":"https:\/\/secure.gravatar.com\/avatar\/a37d6b270be81ecbf4ab9ca7260f2d1ee4d0295343706f0648e9d7a0d75243d3?s=96&d=mm&r=g","comment_count":0,"post_likes":0,"post_views":0},"tpgb_post_category":{"category":"<a href=\"https:\/\/onedesk.com\/fr\/category\/non-classifiee\/\" alt=\"Non classifi\u00e9(e)\"  class=\"category-non-classifiee\">Non classifi\u00e9(e)<\/a> "},"jetpack_shortlink":"https:\/\/wp.me\/pfpPaI-Fb1","amp_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/onedesk.com\/fr\/wp-json\/wp\/v2\/posts\/158287","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onedesk.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onedesk.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onedesk.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/onedesk.com\/fr\/wp-json\/wp\/v2\/comments?post=158287"}],"version-history":[{"count":3,"href":"https:\/\/onedesk.com\/fr\/wp-json\/wp\/v2\/posts\/158287\/revisions"}],"predecessor-version":[{"id":158290,"href":"https:\/\/onedesk.com\/fr\/wp-json\/wp\/v2\/posts\/158287\/revisions\/158290"}],"wp:attachment":[{"href":"https:\/\/onedesk.com\/fr\/wp-json\/wp\/v2\/media?parent=158287"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onedesk.com\/fr\/wp-json\/wp\/v2\/categories?post=158287"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onedesk.com\/fr\/wp-json\/wp\/v2\/tags?post=158287"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}