Introduction

A zero day exploit was release for log forg, a java base logging utility as part of the apache logging services project. The impact is people are comparing this to heart bleed, but it's actually much worse in a number of ways. This vulnerability will also be with us for years, because malicious payloads and vulnerable systems can sit dormant for any amount of time.