Lucene search
B9B4FADB-2546-5DFD-A26E-B1FC4C07FCE7HistoryDec 14, 2021 - 12:35 p.m.
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-1412:35:08
212
deserialization apache log4j rce log4jshell_1.x attack restriction jms environment log4j.properties file log4shell 2.x github reapoc contribute.
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Log4jShell_1.x
Log4j RCE 1.x Poc
Attack
ibm
ibm
Security Bulletin: Vulnerability in Apache Log4j affects some features of Internet Service Monitoring Agent for IBM Application Performance Management(CVE-2021-4104)
2022-01-14 12:39:15
nessus
nessus
RHEL 7 : rh-maven36-log4j12 (RHSA-2021:5269)
2021-12-23 00:00:00
CentOS 7 : log4j (CESA-2021:5206)
2021-12-21 00:00:00
Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104)
2021-12-15 00:00:00
suse
suse
Security update for log4j12 (important)
2021-12-24 00:00:00
Security update for log4j (important)
2021-12-17 00:00:00
Security update for log4j12 (important)
2021-12-17 00:00:00
oraclelinux
oraclelinux
log4j security update
2021-12-21 00:00:00
log4j security update
2022-01-26 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5223-1)
2022-01-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:4115-1)
2021-12-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:4111-1)
2021-12-18 00:00:00
gentoo
gentoo
Arduino: Remote Code Execution
2023-12-22 00:00:00
Minecraft Server: Remote Code Execution
2023-12-20 00:00:00
Ubiquiti UniFi: remote code execution via bundled log4j
2023-10-26 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-4104
2022-01-17 14:23:20
osv
osv
Using JMSAppender in log4j configuration may lead to deserialization of untrusted data
2021-12-17 20:42:38
kafka-kit-2.1.0-2.1 on GA media
2024-06-15 00:00:00
apache-log4j1.2 vulnerability
2022-02-08 21:01:33
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2022-01-10 09:01:46
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-19 05:13:25
ubuntu
ubuntu
Apache Log4j 1.2 vulnerability
2022-01-12 00:00:00
Apache Log4j 1.2 vulnerability
2022-02-08 00:00:00
github
github
Using JMSAppender in log4j configuration may lead to deserialization of untrusted data
2021-12-17 20:42:38
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data
2021-12-14 19:49:31
Deserialization of Untrusted Data in Log4j 1.x
2022-01-21 23:27:14
redhat
redhat
(RHSA-2021:5269) Moderate: rh-maven36-log4j12 security update
2021-12-22 21:14:37
(RHSA-2021:5206) Moderate: log4j security update
2021-12-20 08:38:19
cnvd
cnvd
Apache Log4j Code Execution Vulnerability
2021-12-16 00:00:00
kaspersky
kaspersky
KLA12407 RCE vulnerability in Apache Log4j
2021-12-14 00:00:00
centos
centos
log4j security update
2021-12-21 21:36:17
prion
prion
Deserialization of untrusted data
2022-01-18 16:15:00
Deserialization of untrusted data
2021-12-14 12:15:00
atlassian
atlassian
Update Log4J to 1.2.17-atlassian-15 to fix CVE-2021-4104
2022-03-07 08:14:14
Update Log4J to 1.2.17-atlassian-15 to fix CVE-2021-4104
2022-01-14 13:13:21
nvd
nvd
CVE-2022-23302
2022-01-18 16:15:08
CVE-2021-4104
2021-12-14 12:15:12
cve
cve
CVE-2022-23302
2022-01-18 16:15:08
CVE-2021-4104
2021-12-14 12:15:12
veracode
veracode
Deserialisation Of Untrusted Object
2021-12-15 13:38:24
ubuntucve
ubuntucve
debiancve
debiancve
CVE-2022-23302
2022-01-18 16:15:08
CVE-2021-4104
2021-12-14 12:15:12
f5
f5
K24554520 : Apache Log4j Remote Code Execution vulnerability CVE-2021-4104
2021-12-15 00:00:00
K59563964 : Apache Log4j Remote Code Execution vulnerability CVE-2022-23302
2022-01-31 00:00:00
cvelist
cvelist
redhatcve
redhatcve
CVE-2021-44228
2022-05-07 14:19:14
CVE-2021-4104
2022-05-07 14:29:21
amazon
amazon
Important: log4j
2022-01-18 20:15:00
trellix
trellix
Log4shell Vulnerability is the Coal in Our Stocking for 2021
2022-01-19 00:00:00
Log4shell Vulnerability is the Coal in Our Stocking for 2021
2022-01-19 00:00:00
attackerkb
attackerkb
CVE-2021-44228 (Log4Shell)
2022-02-08 00:00:00
threatpost
threatpost
Apache’s Fix for Log4Shell Can Lead to DoS Attacks
2021-12-15 14:04:19
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Related for B9B4FADB-2546-5DFD-A26E-B1FC4C07FCE7