- Version #TB211201SU
- Download 195
- File Size 100 KB
- File Count 1
- Create Date December 6, 2021
- Last Updated March 14, 2022
Reference #: TB211201SU
Title: Apache Log4j Vulnerability
Date: December 16, 2021
Description:
On December 10, 2021, notice of a critical remote code vulnerability was published concerning the Apache Log4j library. Vulnerable versions include Apache Log4j2 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0. The vulnerability is specific to log4j-core and does not extend to log4net, log4cxx, or other Apache Logging Services. Bad actors may use log messages or log message parameters to execute arbitrary code on the targeted server. Salient Systems is in the process of assessing potential impact to its products. Follow the links in the following sections for more detailed information on the vulnerability.
Vulnerability ID: CVE-2021-44228
Issue Summary:
Apache Publication: Apache Log4j Remote Code Execution
CVE Details: CVE-2021-44228
Download