Lucene search
AkhudavetsCONFSERVER-59549HistoryMar 02, 2020 - 3:58 a.m.
Apache Log4j - Arbitrary Code Execution in confserver/confluence (master)
2020-03-0203:58:39
akhudavets
jira.atlassian.com
44
0.794 High
EPSS
Percentile
98.3%
h3. Issue Summary
Arbitrary Code Execution in confserver/confluence (master)
h3. Steps to Reproduce
- Vulnerability: Arbitrary Code Execution
- Severity: {color:#f9423a}High{color}
- Project: confserver/confluence
- Branch: master
- Scan Date: Unknown
Vulnerability ID: CVE-2019-17571
log4j-core is vulnerable to arbitrary code execution. Deserialization of untrusted data in TcpSocketServer and UdpSocketServer when listening for log data allows an attacker to execute arbitrary code via a malicious deserialization gadget.
[View more details|https://atlassian.sourceclear.io/teams/6YYCddV/issues/vulnerabilities/28954266]
h3. Expected Results
N/A
h3. Actual Results
N/A
h3. Workaround
N/A
Related
f5
f5
K61529042 : Log4j vulnerability CVE-2019-17571
2020-04-08 00:00:00
osv
osv
CVE-2019-17571
2019-12-20 17:15:11
apache-log4j1.2 - security update
2020-01-12 00:00:00
Apache Log4j vulnerability
2020-09-15 14:58:57
ibm
ibm
veracode
veracode
Arbitrary Code Execution
2019-12-23 04:57:47
Remote Code Execution (RCE)
2017-04-18 01:36:45
debiancve
debiancve
CVE-2019-17571
2019-12-20 17:15:00
checkpoint_advisories
checkpoint_advisories
Apache Log4j Remote Code Execution (CVE-2019-17571)
2020-03-01 00:00:00
debian
debian
[SECURITY] [DSA 4686-1] apache-log4j1.2 security update
2020-05-15 22:17:17
[SECURITY] [DSA 4686-1] apache-log4j1.2 security update
2020-05-15 22:17:02
[SECURITY] [DLA 2065-1] apache-log4j1.2 security update
2020-01-12 22:27:35
openvas
openvas
openSUSE: Security Advisory for log4j (openSUSE-SU-2020:0051_1)
2020-01-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0053-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-4495-1)
2020-09-16 00:00:00
ubuntu
ubuntu
Apache Log4j vulnerability
2020-09-15 00:00:00
Apache Log4j vulnerabilities
2023-04-05 00:00:00
cve
cve
CVE-2019-17571
2019-12-20 17:15:00
nessus
nessus
openSUSE Security Update : log4j (openSUSE-2020-51)
2020-01-15 00:00:00
SUSE SLES11 Security Update : log4j (SUSE-SU-2020:14267-1)
2021-06-10 00:00:00
Debian DSA-4686-1 : apache-log4j1.2 - security update
2020-05-18 00:00:00
symantec
symantec
cvelist
cvelist
CVE-2019-17571
2019-12-20 16:01:21
prion
prion
Deserialization of untrusted data
2019-12-20 17:15:00
ubuntucve
ubuntucve
CVE-2019-17571
2019-12-20 00:00:00
suse
suse
Security update for log4j (important)
2020-01-14 00:00:00
redhat
redhat
(RHSA-2022:5053) Important: log4j security update
2022-06-15 10:01:13
(RHSA-2017:2423) Important: log4j security update
2017-08-07 07:26:13
cloudlinux
cloudlinux
Fixed CVE-2019-17571 in log4j
2022-06-21 20:23:31
github
github
Deserialization of Untrusted Data in Log4j
2020-01-06 18:43:49
redhatcve
redhatcve
CVE-2017-5645
2019-10-10 10:12:57
CVE-2019-17571
2020-04-05 23:06:12
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2019-12-25 16:46:11
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-13 19:14:23
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-13 07:48:49
centos
centos
log4j security update
2017-08-31 18:57:53
rosalinux
rosalinux
Advisory ROSA-SA-2021-1909
2021-07-02 17:26:24
amazon
amazon
Important: log4j
2022-01-18 20:15:00
Medium: log4j
2022-01-18 21:37:00
attackerkb
attackerkb
CVE-2019-17571
2019-12-20 00:00:00
atlassian
atlassian
mageia
mageia
Updated davmail packages fix security vulnerability
2023-04-15 22:03:44
gentoo
gentoo
Apache Log4j: Multiple Vulnerabilities
2024-02-18 00:00:00
cert
cert
Apache Log4j allows insecure JNDI lookups
2021-12-15 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00