Lucene search
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.LOG4J_LOG4SHELL_SMB.NBINHistoryDec 21, 2021 - 12:00 a.m.
Apache Log4Shell RCE detection via callback correlation (Direct Check SMB)
2021-12-2100:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
36
A remote code execution vulnerability exists in Apache Log4j < 2.15.0 due to insufficient protections on message lookup substitutions when dealing with user controlled input. A remote, unauthenticated attacker can explolit this, via a web request to execute arbitrary code with the permission level of the running Java process.
Binary data log4j_log4shell_smb.nbin