Lucene search
RedHatRHSA-2021:5148HistoryDec 15, 2021 - 7:49 p.m.
(RHSA-2021:5148) Critical: OpenShift Container Platform 4.8.24 extras security update
2021-12-1519:49:01
access.redhat.com
38
0.976 High
EPSS
Percentile
100.0%
Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
- log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value (CVE-2021-44228)
- log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender (CVE-2021-4104)
- log4j-core: DoS in log4j 2.x with thread context message pattern and context lookup pattern (incomplete fix for CVE-2021-44228) (CVE-2021-45046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
ibm
ibm
Security Bulletin: Vulnerabilities in Apache log4j2 (CVE-2021-4104, CVE-2021-44228, CVE-2021-45046) affect IBM Spectrum LSF Suite and IBM Spectrum LSF Suite for HPA
2021-12-22 00:03:19
symantec
symantec
Symantec Security Advisory for Log4j Vulnerability
2021-12-11 01:06:47
nessus
nessus
GLSA-202310-16 : Ubiquiti UniFi: remote code execution via bundled log4j
2023-10-26 00:00:00
Palo Alto Networks PAN-OS for Panorama < 9.0.15 / 9.1.12-h3 / 10.0.8-h8 Multiple RCE (Log4Shell)
2022-02-10 00:00:00
Splunk Enterprise 8.1.x < 8.1.7.2 / 8.2.x < 8.2.3.3 Log4j
2022-02-25 00:00:00
threatpost
threatpost
Apache’s Fix for Log4Shell Can Lead to DoS Attacks
2021-12-15 14:04:19
APT ‘Aquatic Panda’ Targets Universities with Log4Shell Exploit Tools
2021-12-30 16:16:23
attackerkb
attackerkb
CVE-2021-44228 (Log4Shell)
2022-02-08 00:00:00
CVE-2021-45046
2021-12-14 00:00:00
redhat
redhat
qualysblog
qualysblog
CVE-2021-44228: Apache Log4j2 Zero-Day Exploited in the Wild (Log4Shell)
2021-12-10 19:30:11
New Options Profiles for Log4Shell Detection
2021-12-20 17:33:11
rapid7blog
rapid7blog
The Everyperson’s Guide to Log4Shell (CVE-2021-44228)
2021-12-15 19:44:42
How to Protect Your Applications Against Log4Shell With tCell
2021-12-15 14:58:14
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-17 10:36:16
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-16 17:22:17
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-13 21:57:58
thn
thn
New Local Attack Vector Expands the Attack Surface of Log4j Vulnerability
2021-12-18 12:18:00
Hackers Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges
2021-12-16 06:24:00
gentoo
gentoo
Ubiquiti UniFi: remote code execution via bundled log4j
2023-10-26 00:00:00
amazon
amazon
Critical: java-17-amazon-corretto, java-11-amazon-corretto, java-1.8.0-openjdk, java-1.7.0-openjdk
2021-12-17 18:12:00
Critical: aws-kinesis-agent
2021-12-16 00:11:00
Critical: java-1.8.0-openjdk, java-1.7.0-openjdk, java-1.6.0-openjdk
2021-12-17 17:39:00
prion
prion
Default configuration
2021-12-14 19:15:00
Deserialization of untrusted data
2021-12-14 12:15:00
redhatcve
redhatcve
veracode
veracode
Denial Of Service (DoS)
2021-12-15 00:30:50
Deserialisation Of Untrusted Object
2021-12-15 13:38:24
openvas
openvas
vmware
vmware
github
github
Incomplete fix for Apache Log4j vulnerability
2021-12-14 18:01:28
Remote code injection in Log4j
2021-12-10 00:40:56
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data
2021-12-14 19:49:31
osv
osv
Remote code injection in Log4j
2021-12-10 00:40:56
CVE-2021-45046
2021-12-14 19:15:07
Incomplete fix for Apache Log4j vulnerability
2021-12-14 18:01:28
ubuntucve
ubuntucve
CVE-2021-45046
2021-12-14 00:00:00
CVE-2021-4104
2021-12-14 00:00:00
intel
intel
mssecure
mssecure
cvelist
cvelist
typo3
typo3
Statement on Recent log4j/log4shell Vulnerabilities (CVE-2021-44228)
2021-12-16 00:00:00
debiancve
debiancve
CVE-2021-45046
2021-12-14 19:15:07
CVE-2021-4104
2021-12-14 12:15:12
kitploit
kitploit
atlassian
atlassian
Update Log4J to 1.2.17-atlassian-15 to fix CVE-2021-4104
2022-01-14 13:13:21
Update Log4J to 1.2.17-atlassian-15 to fix CVE-2021-4104
2022-03-07 08:14:14
malwarebytes
malwarebytes
mmpc
mmpc
impervablog
impervablog
Log4Shell log4j Remote Code Execution – The COVID of the Internet
2022-01-06 16:41:56
huawei
huawei
cisa_kev
cisa_kev
Apache Log4j2 Deserialization of Untrusted Data Vulnerability
2023-05-01 00:00:00
mageia
mageia
Updated log4j packages fix security vulnerability
2021-12-19 15:26:08
freebsd
freebsd
graylog -- remote code execution in log4j from user-controlled log input
2021-11-14 00:00:00
f5
f5
K32171392 : Apache Log4j2 vulnerability CVE-2021-45046
2021-12-16 00:00:00
K24554520 : Apache Log4j Remote Code Execution vulnerability CVE-2021-4104
2021-12-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Log4j Remote Code Execution (CVE-2021-44228; CVE-2021-45046)
2021-12-10 00:00:00
nuclei
nuclei
Apache Log4j2 - Remote Code Injection
2021-12-23 15:41:50
talosblog
talosblog
Quarterly Report: Incident Response Trends in Q2 2022
2022-07-26 14:03:00
fortinet
fortinet
Apache log4j2 log messages substitution (CVE-2021-44228)
2021-12-12 00:00:00
securelist
securelist
CVE-2021-44228 vulnerability in Apache Log4j library
2021-12-13 14:10:21