Lucene search

K
nessusThis script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.LOG4J_LOG4SHELL_WWW.NBIN
HistoryDec 12, 2021 - 12:00 a.m.

Apache Log4Shell RCE detection via Path Enumeration (Direct Check HTTP)

2021-12-1200:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
141

The remote web server is affected by a remote code execution vulnerability via a flaw in the Apache Log4j library. The vulnerability is due to the processing of unsanitized input sent to a logging function. A remote, unauthenticated attacker can explolit this, via a web request to execute arbitrary code with the permission level of the running Java process.

Binary data log4j_log4shell_www.nbin
VendorProductVersionCPE
apachelog4jcpe:/a:apache:log4j