VulnerabilitycriticalExploited in the wild

Week in review: Apache Log4j 0day exploited, Kali Linux 2021.4 released, Patch Tuesday forecast

Help Net Securityby @helpnetsecurityDec 12, 2021 · 00:00 UTC (Dec 12, 2021)6 min read2

Read at helpnetsecurity.com

Analyze CVE-2021-44228 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-44228 CVE-2021-44515

Tags: cve-2021-44228 cve-2021-44515 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2021-44515	Authentication Bypass Leading to RCE in Zoho ManageEngine Desktop Central	9.8	100%	KEVPoC	Dec 12, 2021 KEV Dec 10, 2021

From the original article

6 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles and interviews: Critical RCE 0day in Apache Log4j library exploited in the wild (CVE-2021-44228) A critical zero-day vulnerability in Apache Log4j (CVE-2021-44228), a widely used Java logging library, is being leveraged by attackers in the wild.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.