Vulnerabilityhigh

AWS's Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation

Palo Alto Unit 42by Yuval AvrahamiJun 5, 2024 · 22:41 UTC (Jun 5, 2024)8 min read2

Read at unit42.paloaltonetworks.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-3100 CVE-2021-3101 CVE-2022-0070 CVE-2022-0071 CVE-2021-44228

Tags: cve-2021-3100 cve-2021-3101 cve-2022-0070 cve-2022-0071 cve-2021-44228 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-0070 +1 related CVE CVE-2021-3100	Incomplete fix for CVE-2021-3100	8.8	<1%	PoC	Apr 19, 2022
CVE-2021-3101 +1 related CVE CVE-2022-0071	Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process	8.8	<1%	PoC	Apr 19, 2022
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021

From the original article

8 min read at unit42.paloaltonetworks.com

Following Log4Shell , AWS released several hot patch solutions that monitor for vulnerable Java applications and Java containers and patch them on the fly. Each solution suits a different environment, covering standalone servers, Kubernetes clusters, Elastic Container Service (ECS) clusters and Fargate.

Palo Alto Unit 42

By Yuval Avrahami · unit42.paloaltonetworks.com

Read the full article at Palo Alto Unit 42

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.