Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD4B1AC5A3-5BD4-11EC-8602-589CFC007716
HistoryDec 11, 2021 - 12:00 a.m.

OpenSearch -- Log4Shell

2021-12-1100:00:00
vuxml.freebsd.org
280

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

0.976 High

EPSS

Percentile

100.0%

JSON

OpenSearch reports:

A recently published security issue (CVE-2021-44228) affects several versions of the broadly-used Apache Log4j library. Some software in the OpenSearch project includes versions of Log4j referenced in this CVE. While, at time of writing, the team has not found a reproduceable example in OpenSearch of remote code execution (RCE) described in this issue, its severity is such that all users should take mitigation measures. As recommended by the advisory, the team has released OpenSearch 1.2.1, which updates Log4j to version 2.15.0. For those who cannot upgrade to 1.2.1, the Log4j website outlines additional measures to mitigate the issue. This patch release also addresses CVE-2021-4352 in the OpenSearch Docker distributions…

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchopensearch< 1.2.1UNKNOWN

Related

cvelist 1
cve 1
prion 1
nvd 2
threatpost 41
nessus 9
trellix 1
githubexploit 43
kitploit 2
ibm 50
hivepro 1
osv 4
fedora 1
thn 5
rapid7blog 3
freebsd 1
suse 2
hackerone 2
openvas 4
cisa 3
packetstorm 2
metasploit 1
ubuntu 2
zdt 1
wallarmlab 1
github 1
mmpc 1
qualysblog 2
malwarebytes 1
mscve 1
impervablog 2
redhat 2
kaspersky 1
debiancve 1
vmware 2
akamaiblog 1
cvelist
cvelist
CVE-2021-4352
2023-06-07 01:51:21
cve
cve
CVE-2021-4352
2023-06-07 02:15:13
prion
prion
Authorization
2023-06-07 02:15:00
nvd
nvd
CVE-2021-4352
2023-06-07 02:15:13
CVE-2021-44228
2021-12-10 10:15:09
threatpost
threatpost
The Log4j Vulnerability Puts Pressure on the Security World
2022-01-18 20:21:04
Emotet Now Spreading Through Malicious Excel Files
2022-02-16 13:39:33
Cyberattackers Cook Up Employee Personal Data Heist for Meyer
2022-02-22 20:41:48
nessus
nessus
FreeBSD : serviio -- affected by log4j vulnerability (1ea05bb8-5d74-11ec-bb1e-001517a2e1a4)
2021-12-15 00:00:00
Cisco Identity Services Log4j Engine Remote Code Execution (cisco-sa-apache-log4j-qRuKNEbd)
2022-05-02 00:00:00
Cisco UCS Director Log4j Remote Code Execution (cisco-sa-apache-log4j-qRuKNEbd)
2022-06-03 00:00:00
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2022-04-18 09:16:05
Exploit for Deserialization of Untrusted Data in Apache Log4J
2022-01-20 10:34:48
Exploit for Deserialization of Untrusted Data in Apache Log4J
2022-02-12 03:02:24
kitploit
kitploit
NodeSecurityShield - A Developer And Security Engineer Friendly Package For Securing NodeJS Applications
2022-05-14 21:30:00
Ox4Shell - Deobfuscate Log4Shell Payloads With Ease
2022-08-24 12:30:00
ibm
ibm
Security Bulletin: Vulnerabilities in log4j could affect Name Analyzer in IBM InfoSphere Global Name Management (CVE-2021-44228)
2022-04-20 17:04:55
Security Bulletin: A Remote Attack Vulnerability in Apache Log4j affects Engineering Lifecycle Management and IBM Engineering products
2022-01-11 17:38:09
Security Bulletin: IBM Data Model for Energy and Utilities is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44228)
2021-12-30 18:26:51
hivepro
hivepro
Monti ransomware infiltrates networks via the well-known Log4Shell
2022-09-16 10:51:13
osv
osv
apache-log4j2 - security update
2021-12-12 00:00:00
apache-log4j2 vulnerability
2021-12-17 12:46:46
apache-log4j2 vulnerability
2021-12-14 13:39:20
fedora
fedora
[SECURITY] Fedora 34 Update: jansi-2.1.1-4.fc34
2021-12-22 01:14:26
thn
thn
NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon
2022-01-08 07:04:00
Last Years Open Source - Tomorrow's Vulnerabilities
2022-11-01 12:04:00
Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations
2022-08-27 03:23:00
rapid7blog
rapid7blog
Being Naughty to See Who Was Nice: Machine Learning Attacks on Santa’s List
2022-01-14 14:46:41
Log4Shell 2 Months Later: Security Strategies for the Internet's New Normal
2022-02-17 18:00:00
3 Takeaways From the 2022 Verizon Data Breach Investigations Report
2022-05-31 13:22:17
freebsd
freebsd
graylog -- include log4j patches
2021-12-10 00:00:00
suse
suse
Security update for log4j (important)
2021-12-12 00:00:00
Security update for logback (important)
2021-12-24 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: Log4Shell: RCE 0-day exploit on █████████
2021-12-16 18:32:13
Acronis: [CVE-2021-44228] nps.acronis.com is vulnerable to the recent log4shell 0-day
2021-12-13 23:42:16
openvas
openvas
Fedora: Security Advisory for log4j (FEDORA-2021-66d6c484f3)
2021-12-23 00:00:00
Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Active Check
2021-12-20 00:00:00
Mageia: Security Advisory (MGASA-2021-0556)
2022-01-28 00:00:00
cisa
cisa
Ivanti Updates Log4j Advisory with Security Updates for Multiple Products  
2022-01-14 00:00:00
CISA Issues ED 22-02 Directing Federal Agencies to Mitigate Apache Log4j Vulnerabilities
2021-12-17 00:00:00
CISA Creates Webpage for Apache Log4j Vulnerability CVE-2021-44228
2021-12-13 00:00:00
packetstorm
packetstorm
Apache Log4j2 2.14.1 Information Disclosure
2021-12-14 00:00:00
UniFi Network Application Unauthenticated Log4Shell Remote Code Execution
2022-01-24 00:00:00
metasploit
metasploit
Log4Shell HTTP Header Injection
2021-12-29 14:10:07
ubuntu
ubuntu
Apache Log4j 2 vulnerability
2021-12-17 00:00:00
Apache Log4j 2 vulnerability
2021-12-14 00:00:00
zdt
zdt
UniFi Network Application Unauthenticated Log4Shell Remote Code Execution Exploit
2022-01-24 00:00:00
wallarmlab
wallarmlab
Log4j 0day mitigation update CVE-2021-44228
2021-12-10 20:56:40
github
github
Apache Log4j Remote Code Execution
2021-12-14 21:07:14
mmpc
mmpc
Build a stronger cybersecurity team through diversity and training
2022-01-20 17:00:00
qualysblog
qualysblog
Put SecOps in the Driver’s Seat with Custom Assessment and Remediation
2022-05-20 13:00:00
Detect Exploitation Attempts With Qualys XDR (Beta)
2021-12-14 23:55:43
malwarebytes
malwarebytes
CISA Log4Shell warning: Patch VMware Horizon installations immediately
2022-06-27 09:54:58
mscve
mscve
Apache Log4j Remote Code Execution Vulnerability
2021-12-16 08:00:00
impervablog
impervablog
2021 in Review, Part 1: 5 Cybersecurity Topics that Made News
2021-12-28 14:08:23
2021 in Review, Part 4: 5 Cybersecurity Topics to Watch in 2022
2022-01-04 10:44:57
redhat
redhat
(RHSA-2022:0082) Critical: Red Hat Process Automation Manager 7.11.1 security update
2022-01-11 10:28:38
(RHSA-2021:5132) Critical: Red Hat Data Grid 8.2.2 security update
2021-12-14 20:00:47
kaspersky
kaspersky
KLA12442 RCE vulnerability in LibreOffice
2021-12-16 00:00:00
debiancve
debiancve
CVE-2021-44228
2021-12-10 10:15:09
vmware
vmware
VMware Response to Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228)
2021-12-10 00:00:00
VMware Response to Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228)
2021-12-10 00:00:00
akamaiblog
akamaiblog
CVE-2021-44228 - Patching is Recommended for Evolving Zero Day Vulnerability in Apache Log4j that allows remote code execution (RCE)
2021-12-11 11:00:53

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

0.976 High

EPSS

Percentile

100.0%

JSON
Related for 4B1AC5A3-5BD4-11EC-8602-589CFC007716
cvelist1cve1prion1nvd2threatpost41nessus9trellix1githubexploit43kitploit2ibm50hivepro1osv4fedora1thn5rapid7blog3freebsd1suse2hackerone2openvas4cisa3packetstorm2metasploit1ubuntu2zdt1wallarmlab1github1mmpc1qualysblog2malwarebytes1mscve1impervablog2redhat2kaspersky1debiancve1vmware2akamaiblog1