CISA orders federal civilian agencies to patch Log4j vulnerability and 12 others by December 24 - ZDNET
ZDNet reported in December 2021 that CISA added Log4j and 12 other vulnerabilities to its Known Exploited Vulnerabilities Catalog with a December 24 patching deadline. Bugcrowd CTO Casey Ellis commended the deadlines but said most organizations would struggle, since they must first find Log4j and then run regression testing before patching.
Source description, as published
The US Cybersecurity and Infrastructure Security Agency added the Log4j vulnerability to its Known Exploited Vulnerabilities Catalog.