Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubexploitEBBBCCE8-232D-5227-B6F8-A797B6B8D4ED
HistoryJan 29, 2022 - 2:26 p.m.

Exploit for Deserialization of Untrusted Data in Apache Log4J

2022-01-2914:26:55
4
log4j 1.2
security fork
removed classes
gradle
maven
cve
socketserver
smtpappender
jmsappender
jmssink
jdbcappender
eclipse setup
building artifacts
default log4j library

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

Low

EPSS

0.806

Percentile

98.4%

JSON

log4-min

Fork of Log4j 1.2 project, without additional…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

Related

ibm 33
redhat 33
openvas 20
osv 11
ubuntu 2
nessus 43
oraclelinux 3
suse 5
almalinux 1
debian 4
rocky 1
gentoo 1
centos 1
amazon 4
mageia 1
atlassian 9
rosalinux 1
githubexploit 3
nvd 1
cve 3
github 3
cloudlinux 2
prion 1
ubuntucve 2
debiancve 3
f5 3
cvelist 2
attackerkb 1
veracode 1
checkpoint_advisories 1
ibm
ibm
IBM Sterling B2B Integrator and Sterling Filegateway NOT Affected by CVE-2021-4104, CVE-2021- 44832, CVE-2019-17571, CVE-2022-23307, CVE-2022-23305, CVE-2022-23302 and CVE-2020-9488 Exploit
2022-03-03 20:50:59
Security Bulletin: Order Management could be subject to Log4j 1.x vulnerability that could be exploited to remotely execute arbitrary code .
2024-04-12 17:42:51
Security Bulletin: Multiple vulnerabilities in log4j-1.2.16.jar used by IBM Operations Analytics - Log Analysis
2022-09-19 06:36:49
redhat
redhat
(RHSA-2022:0497) Important: Red Hat JBoss Data Virtualization 6.4.8.SP1 security update
2022-02-09 13:03:14
(RHSA-2022:0507) Important: Red Hat JBoss Data Virtualization 6.4.8.SP2 security update
2022-02-10 17:22:10
(RHSA-2022:0435) Important: Red Hat JBoss Enterprise Application Platform 7.4 security update
2022-02-03 18:14:45
openvas
openvas
ILIAS < 5.4.26, 6.x < 6.14, 7.x < 7.5 ilServer Multiple Log4j Vulnerabilities
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-5998-1)
2023-04-06 00:00:00
Debian: Security Advisory (DLA-2905-1)
2022-02-01 00:00:00
osv
osv
apache-log4j1.2 vulnerabilities
2023-04-05 21:26:34
apache-log4j1.2 - security update
2022-01-31 00:00:00
Important: parfait:0.5 security update
2022-01-26 14:27:19
ubuntu
ubuntu
Apache Log4j vulnerabilities
2023-04-05 00:00:00
Apache Log4j vulnerability
2020-09-15 00:00:00
nessus
nessus
Apache Log4j 1.x Multiple Vulnerabilities
2022-01-19 00:00:00
RHEL 8 : RHV Manager (ovirt-engine) security update [ovirt-4.4.10-1] (Low) (RHSA-2022:0475)
2022-02-09 00:00:00
RHEL 8 : parfait:0.5 (RHSA-2022:0290)
2022-02-11 00:00:00
oraclelinux
oraclelinux
parfait:0.5 security update
2022-01-27 00:00:00
log4j security update
2022-02-08 00:00:00
log4j security update
2022-05-23 00:00:00
suse
suse
Security update for kafka (important)
2022-02-16 00:00:00
Security update for log4j12 (important)
2022-01-28 00:00:00
Security update for log4j (important)
2022-01-27 00:00:00
almalinux
almalinux
Important: parfait:0.5 security update
2022-01-26 14:27:19
debian
debian
[SECURITY] [DLA 2905-1] apache-log4j1.2 security update
2022-01-31 14:24:44
[SECURITY] [DSA 4686-1] apache-log4j1.2 security update
2020-05-15 22:17:02
[SECURITY] [DSA 4686-1] apache-log4j1.2 security update
2020-05-15 22:17:02
rocky
rocky
parfait:0.5 security update
2022-01-26 14:27:19
gentoo
gentoo
Apache Log4j: Multiple Vulnerabilities
2024-02-18 00:00:00
centos
centos
log4j security update
2022-02-07 16:47:44
amazon
amazon
Important: log4j
2022-02-15 22:54:00
Important: log4j
2023-03-30 22:50:00
Important: log4j
2022-01-18 20:15:00
mageia
mageia
Updated davmail packages fix security vulnerability
2023-04-15 22:03:44
atlassian
atlassian
Crowd: Multiple vulnerabilities in log4j < 1.2.7-atlassian-16
2022-05-18 08:53:01
Jira: Multiple vulnerabilities in log4j < 1.2.17-atlassian-16
2022-06-06 12:49:38
Bamboo remote agent: Multiple vulnerabilities in log4j < 1.2.7-atlassian-16
2022-03-31 12:45:26
rosalinux
rosalinux
Advisory ROSA-SA-2021-1909
2021-07-02 17:26:24
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-14 22:27:14
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-14 22:27:14
Exploit for Expression Language Injection in Apache Log4J
2021-12-11 11:18:46
nvd
nvd
CVE-2022-23302
2022-01-18 16:15:08
cve
cve
CVE-2022-23302
2022-01-18 16:15:08
CVE-2019-17571
2019-12-20 17:15:11
CVE-2020-9488
2020-04-27 16:15:12
github
github
Deserialization of Untrusted Data in Log4j 1.x
2022-01-21 23:27:14
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender
2020-06-05 14:15:51
Deserialization of Untrusted Data in Log4j
2020-01-06 18:43:49
cloudlinux
cloudlinux
Fix of CVE: CVE-2022-23307, CVE-2022-23302
2022-02-10 13:49:32
Fixed CVE-2019-17571 in log4j
2022-06-21 20:23:31
prion
prion
Deserialization of untrusted data
2022-01-18 16:15:00
ubuntucve
ubuntucve
CVE-2022-23302
2022-01-18 00:00:00
CVE-2020-9488
2020-04-27 00:00:00
debiancve
debiancve
CVE-2022-23302
2022-01-18 16:15:08
CVE-2019-17571
2019-12-20 17:15:11
CVE-2020-9488
2020-04-27 16:15:12
f5
f5
K59563964 : Apache Log4j Remote Code Execution vulnerability CVE-2022-23302
2022-01-31 00:00:00
K34002344 : Overview of Log4j vulnerabilities (2021 and 2022)
2022-02-01 00:00:00
K61529042 : Log4j vulnerability CVE-2019-17571
2020-04-08 00:00:00
cvelist
cvelist
CVE-2022-23302 Deserialization of untrusted data in JMSSink in Apache Log4j 1.x
2022-01-18 15:25:20
CVE-2020-9488
2020-04-27 15:36:10
attackerkb
attackerkb
CVE-2019-17571
2019-12-20 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-12-23 04:57:47
checkpoint_advisories
checkpoint_advisories
Apache Log4j Remote Code Execution (CVE-2019-17571)
2020-03-01 00:00:00

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

Low

EPSS

0.806

Percentile

98.4%

JSON
Related for EBBBCCE8-232D-5227-B6F8-A797B6B8D4ED
ibm33redhat33openvas20osv11ubuntu2nessus43oraclelinux3suse5almalinux1debian4rocky1gentoo1centos1amazon4mageia1atlassian9rosalinux1githubexploit3nvd1cve3github3cloudlinux2prion1ubuntucve2debiancve3f53cvelist2attackerkb1veracode1checkpoint_advisories1