Vulnerabilitycritical

January 2022 Patch Tuesday forecast: Old is new again

Help Net Securityby @helpnetsecurityJan 11, 2022 · 06:46 UTC (Jan 11, 2022)3 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2021-44228 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-44228 CVE-2021-44832

Tags: cve-2021-44228 cve-2021-44832 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2021-44832	Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when…	6.6	98%		Dec 28, 2021

From the original article

3 min read at helpnetsecurity.com

Welcome to 2022 and a new year of patch management excitement! I’m rapidly approaching 40 years working in this industry and I can honestly say there is rarely a dull day. If you are willing to take on the challenges presented, it is a great industry to work in and I hope you all are excited to start the new year too.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.