Summary

Apache Log4j is missing a required configuration setting that can expose sensitive data. If not fixed, attackers might access and use this data. Update your Apache Log4j configuration to include the missing setting to prevent this risk.