Lucene search
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.APACHE_LOG4SHELL_DNS.NBINHistoryDec 23, 2021 - 12:00 a.m.
Apache Log4Shell RCE detection via callback correlation (Direct Check DNS)
2021-12-2300:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
61
A remote code execution vulnerability exists in Apache Log4j < 2.15.0 due to insufficient protections on message lookup substitutions when dealing with user controlled input. A remote, unauthenticated attacker can explolit this, via a web request to execute arbitrary code with the permission level of the running Java process.
Binary data apache_log4shell_dns.nbin