Lucene search

K
nessusThis script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an affiliate thereof.APACHE_LOG4SHELL_SSH.NBIN
HistoryDec 17, 2021 - 12:00 a.m.

Apache Log4Shell RCE detection via callback correlation (Direct Check SSH)

2021-12-1700:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an affiliate thereof.
www.tenable.com
215

The remote host appears to be running SSH. SSH itself is not vulnerable to Log4Shell; however, the SSH server could potentially be affected if it attempts to log data via a vulnerable log4j library.

This plugin requires that both the scanner and target machine have internet access.

Binary data apache_log4shell_ssh.nbin
VendorProductVersionCPE
apachelog4jcpe:/a:apache:log4j