Can dovecot be leveraged to exploit Solr/Log4shell?

John Fawcett john at voipsupport.it
Tue Dec 14 17:39:33 UTC 2021


On 14/12/2021 03:23, Scott wrote:
> Is this assuming you log at some verbose level ? What if you log at WARN or higher ?
>
> For production it seems kind of silly to log search queries anyways.
>
> Scott

It's a pretty much standard install where most things are at INFO level. 
Probably could turn it down, but has not been an issue.

I think the logic behind it is much like web server logs where every 
single request gets a log entry.

John



More information about the dovecot mailing list