Lucene search
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.APACHE_LOG4J_JDNI_LDAP_GENERIC_HTTP_HEADERS.NBINHistoryDec 11, 2021 - 12:00 a.m.
Apache Log4Shell RCE detection via callback correlation (Direct Check HTTP)
2021-12-1100:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
140
A remote code execution vulnerability exists in Apache Log4j < 2.15.0 due to insufficient protections on message lookup substitutions when dealing with user controlled input. A remote, unauthenticated attacker can explolit this, via a web request to execute arbitrary code with the permission level of the running Java process.
This plugin requires that both the scanner and target machine have internet access.
Binary data apache_log4j_jdni_ldap_generic_http_headers.nbin