Advisoryhigh

CISA Releases Free Scanner to Spot Log4j Exposure

Infosecurity Magazineby Phil MuncasterDec 23, 2021 · 09:21 UTC (Dec 23, 2021)1 min read4 · 1 read

Read at infosecurity-magazine.com

Analyze CVE-2021-44228 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-44228 CVE-2021-45046

Tags: cve-2021-44228 cve-2021-45046 advisory

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2021-45046	Remote Code Execution in Apache Log4j2 via Incomplete Log4Shell Fix	9.0	100%	KEVRansomwarePoC	Dec 14, 2021 KEV May 1, 2023

From the original article

1 min read at infosecurity-magazine.com

The US government’s top security agency has published a new scanning tool to help organizations find unpatched Log4j instances in their IT environment. The Cybersecurity and Infrastructure Security Agency (CISA) posted the Log4j Scanner to GitHub yesterday.

Infosecurity Magazine

By Phil Muncaster · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.