Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

Experts monitor ongoing attacks using exploits for Log4j library flaws

Security Affairsby @securityaffairs ()1 min read2
Read at securityaffairs.com
Analyze CVE-2021-44228 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2021-44228CVE-2021-45046CVE-2021-42550
Tags
cve-2021-44228cve-2021-45046cve-2021-42550vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2021-42550
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration…
6.65%PoC ×3
CVE-2021-44228
JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)
10.0100%KEVRansomwarePoC ×9
KEV
CVE-2021-45046
Remote Code Execution in Apache Log4j2 via Incomplete Log4Shell Fix
9.0100%KEVRansomwarePoC
KEV

From the original article

1 min read at securityaffairs.com

Researchers from DrWeb monitored attacks leveraging exploits for vulnerabilities in the Apache Log4j library Researchers from DrWeb monitored attacks leveraging exploits for vulnerabilities (CVE-2021-44228, CVE-2021-45046, CVE2021-4104, and CVE-2021-42550) in the Apache Log4j library warning of the need to adopt protective measures.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.