VulnerabilitycriticalExploited in the wild

Amazon's Hotpatch for Log4j Flaw Found Vulnerable to Privilege Escalation Bug

The Hacker Newsby @TheHackersNewsApr 23, 2022 · 05:41 UTC (Apr 23, 2022)1 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-3100 CVE-2021-3101 CVE-2022-0070 CVE-2022-0071

Tags: cve-2021-3100 cve-2021-3101 cve-2022-0070 cve-2022-0071 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-0070 +1 related CVE CVE-2021-3100	Incomplete fix for CVE-2021-3100	8.8	<1%	PoC	Apr 19, 2022
CVE-2021-3101 +1 related CVE CVE-2022-0071	Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process	8.8	<1%	PoC	Apr 19, 2022

From the original article

1 min read at thehackernews.com

The "hotpatch" released by Amazon Web Services (AWS) in response to the Log4Shell vulnerabilities could be leveraged for container escape and privilege escalation, allowing an attacker to seize control of the underlying host.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.