AdvisoryhighExploited in the wild

Attackers still exploit Log4Shell on VMware Horizon servers, CISA warns

Help Net Securityby @zeljkazorzJun 24, 2022 · 00:00 UTC (Jun 24, 2022)2 min read3

Read at helpnetsecurity.com

Analyze CVE-2021-44228 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-44228 CVE-2022-22954

Tags: cve-2021-44228 cve-2022-22954 advisory

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2022-22954	Server-Side Template Injection RCE in VMware Workspace ONE Access and Identity Manager	9.8	100%	KEVRansomwarePoC	Apr 11, 2022 KEV Apr 14, 2022

From the original article

2 min read at helpnetsecurity.com

If your organization is running VMware Horizon and Unified Access Gateway servers and you haven’t implemented the patches or workarounds to fix/mitigate the Log4Shell vulnerability (CVE-2021-44228) in December 2021, you should threat all those systems as compromised, the Cybersecurity and Infrastructure Security Agency (CISA) has advised on Thursday.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.