Lucene search
Palo_altoCVELIST:CVE-2022-0070HistoryApr 19, 2022 - 12:00 a.m.
CVE-2022-0070 Log4j hot patch package privilege escalation
2022-04-1900:00:00
CWE-250
palo_alto
www.cve.org
1
8.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
8.5 High
AI Score
Confidence
High
0.976 High
EPSS
Percentile
100.0%
Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to.
CNA Affected
[
{
"product": "log4j-cve-2021-44228-hotpatch",
"vendor": "Amazon Web Services",
"versions": [
{
"lessThan": "1.1-16",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2022-0070
2022-04-19 23:15:13
CVE-2021-3100
2022-04-19 23:15:13
cve
cve
CVE-2022-0070
2022-04-19 23:15:13
CVE-2021-3100
2022-04-19 23:15:13
prion
prion
Design/Logic Flaw
2022-04-19 23:15:00
Code injection
2022-04-19 23:15:00
nessus
nessus
Amazon Linux 2 : log4j-cve-2021-44228-hotpatch (ALAS-2022-1773)
2022-04-19 00:00:00
Amazon Linux AMI : log4j-cve-2021-44228-hotpatch (ALAS-2021-1554)
2021-12-23 00:00:00
Amazon Linux 2 : log4j-cve-2021-44228-hotpatch (ALAS-2021-1732)
2021-12-23 00:00:00
amazon
amazon
Important: log4j-cve-2021-44228-hotpatch
2021-12-22 21:17:00
Important: log4j-cve-2021-44228-hotpatch
2021-12-22 21:18:00
Important: log4j-cve-2021-44228-hotpatch
2022-04-18 19:43:00
cvelist
cvelist
CVE-2021-3100 Log4j hot patch package privilege escalation
2022-04-19 00:00:00
thn
thn
ibm
ibm
Security Bulletin: A security vulnerability has been identified in Apache log4j versions 2.0 beta 9 - 2.14 (CVE-2021-44228) in IBM Maximo Scheduler Optimization
2022-07-01 22:33:25
threatpost
threatpost
NFT Investors Lose $1.7M in OpenSea Phishing Attack
2022-02-22 03:12:30
Most ServiceNow Instances Misconfigured, Exposed
2022-03-09 16:00:32
Just-Released Dark Souls Game, Elden Ring, Includes Killer Bug
2022-03-24 19:23:12
mageia
mageia
Updated log4j packages fix security vulnerability
2021-12-11 04:02:37
f5
f5
K19026212 : Apache Log4j2 Remote Code Execution vulnerability CVE-2021-44228
2021-12-10 00:00:00
redhat
redhat
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-18 12:42:04
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-16 20:02:09
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-11 11:18:46
wallarmlab
wallarmlab
5 things you must know about Log4Shell
2021-12-11 01:22:39
metasploit
metasploit
MobileIron Core Unauthenticated JNDI Injection RCE (via Log4Shell)
2022-07-29 17:31:15
VMware vCenter Server Unauthenticated JNDI Injection RCE (via Log4Shell)
2022-01-12 20:34:45
Log4Shell HTTP Scanner
2021-12-15 13:45:24
suse
suse
Security update for log4j (important)
2021-12-13 00:00:00
ics
ics
Johnson Controls exacq Enterprise Manager
2021-12-23 12:00:00
Karakurt Data Extortion Group
2023-12-12 12:00:00
kaspersky
kaspersky
KLA12396 RCE vulnerability in Microsoft Developer Tools
2021-12-16 00:00:00
impervablog
impervablog
2021 in Review, Part 3: 5 Things Security Professionals Were Discussing this Year
2021-12-30 13:26:47
5 Things We’ve Learned About CVE-2021-44228
2021-12-17 06:44:55
rapid7blog
rapid7blog
Sharing the Gifts of Cybersecurity – Or, a Lesson From My First Year Without Santa
2022-01-03 15:00:00
The 2021 Naughty and Nice Lists: Cybersecurity Edition
2022-01-10 14:57:53
nuclei
nuclei
Apache Log4j2 Remote Code Injection
2021-12-11 19:26:50
openvas
openvas
Fedora: Security Advisory for jansi (FEDORA-2021-66d6c484f3)
2021-12-23 00:00:00
Apache Tika Server 2.x < 2.2.0 Log4j RCE Vulnerability (Log4Shell)
2021-12-23 00:00:00
openSUSE: Security Advisory for log4j (openSUSE-SU-2021:3999-1)
2022-02-01 00:00:00
freebsd
freebsd
bastillion -- log4j vulnerability
2021-12-10 00:00:00
serviio -- affected by log4j vulnerability
2021-12-13 00:00:00
malwarebytes
malwarebytes
What SMBs can do to protect against Log4Shell attacks
2021-12-15 20:59:31
zdt
zdt
Apache Log4j2 2.14.1 - Information Disclosure Exploit
2021-12-14 00:00:00
Intel Data Center Manager 5.1 Local Privilege Escalation Vulnerability
2022-12-10 00:00:00
akamaiblog
akamaiblog
packetstorm
packetstorm
AD Manager Plus 7122 Remote Code Execution
2023-04-03 00:00:00
hackerone
hackerone
Judge.me : Log4j RCE on https://judge.me/reviews
2021-12-15 10:30:12
msrc
msrc
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 08:00:00
qualysblog
qualysblog
Qualys Study Reveals How Enterprises Responded to Log4Shell
2022-03-18 13:00:00
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
kitploit
kitploit
8.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
8.5 High
AI Score
Confidence
High
0.976 High
EPSS
Percentile
100.0%
Related for CVELIST:CVE-2022-0070