Lucene search
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.LOG4J_LOG4SHELL_RPCBIND.NBINHistoryJan 07, 2022 - 12:00 a.m.
Apache Log4Shell RCE detection via callback correlation (Direct Check RPCBIND)
2022-01-0700:00:00
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
156
A remote code execution vulnerability exists in Apache Log4j < 2.15.0 due to insufficient protections on message lookup substitutions when dealing with user controlled input. A remote, unauthenticated attacker can explolit this, via a web request to execute arbitrary code with the permission level of the running Java process.
Binary data log4j_log4shell_rpcbind.nbin