Lucene search
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.MOBILEIRON_LOG4SHELL.NBINHistoryJan 21, 2022 - 12:00 a.m.
MobileIron Core Log4Shell Direct Check (CVE-2021-44228)
2022-01-2100:00:00
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
112
A remote code execution vulnerability exists in MobileIron Core in the bundled Apache Log4j logging library.
Apache Log4j is vulnerable due to insufficient protections on message lookup substitutions when dealing with user controlled input. A remote, unauthenticated attacker can exploit this, via a web request, to execute arbitrary code with the permission level of the running Java process.
This plugin requires that both the scanner and target machine have internet access.
Binary data mobileiron_log4shell.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| mobileiron | mobileiron_core | cpe:/a:mobileiron:mobileiron_core |
Related
ibm
ibm
nessus
nessus
githubexploit
githubexploit
Exploit for Improper Input Validation in Apache Log4J
2021-12-11 12:25:08
Exploit for Deserialization of Untrusted Data in Apache Log4J
2022-01-20 10:34:48
Exploit for Improper Input Validation in Apache Log4J
2021-12-17 10:32:39
threatpost
threatpost
Russian APTs Furiously Phish Ukraine – Google
2022-03-09 14:07:55
Chinese APT Combines Fresh Hodur RAT with Complex Anti-Detection
2022-03-24 14:08:06
Authorities Fully Behead Hydra Dark Marketplace
2022-04-05 17:53:47
mmpc
mmpc
Build a stronger cybersecurity team through diversity and training
2022-01-20 17:00:00
suse
suse
Security update for log4j (important)
2021-12-12 00:00:00
rapid7blog
rapid7blog
Log4Shell 2 Months Later: Security Strategies for the Internet's New Normal
2022-02-17 18:00:00
Being Naughty to See Who Was Nice: Machine Learning Attacks on Santa’s List
2022-01-14 14:46:41
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
wallarmlab
wallarmlab
Log4j 0day mitigation update CVE-2021-44228
2021-12-10 20:56:40
thn
thn
Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations
2022-08-27 03:23:00
NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon
2022-01-08 07:04:00
Last Years Open Source - Tomorrow's Vulnerabilities
2022-11-01 12:04:00
hackerone
hackerone
U.S. Dept Of Defense: Log4Shell: RCE 0-day exploit on █████████
2021-12-16 18:32:13
cisa
cisa
Ivanti Updates Log4j Advisory with Security Updates for Multiple Products
2022-01-14 00:00:00
packetstorm
packetstorm
UniFi Network Application Unauthenticated Log4Shell Remote Code Execution
2022-01-24 00:00:00
Apache Log4j2 2.14.1 Information Disclosure
2021-12-14 00:00:00
github
github
Apache Log4j Remote Code Execution
2021-12-14 21:07:14
fedora
fedora
[SECURITY] Fedora 34 Update: jansi-2.1.1-4.fc34
2021-12-22 01:14:26
freebsd
freebsd
graylog -- include log4j patches
2021-12-10 00:00:00
zdt
zdt
openvas
openvas
Fedora: Security Advisory for log4j (FEDORA-2021-66d6c484f3)
2021-12-23 00:00:00
Opencast < 9.10, 10.x < 10.6 Log4j RCE Vulnerability (GHSA-mf4f-j588-5xm8, Log4Shell)
2022-09-12 00:00:00
Mageia: Security Advisory (MGASA-2021-0556)
2022-01-28 00:00:00
kitploit
kitploit
osv
osv
apache-log4j2 - security update
2021-12-12 00:00:00
apache-log4j2 vulnerability
2021-12-17 12:46:46
apache-log4j2 vulnerability
2021-12-14 13:39:20
hivepro
hivepro
Monti ransomware infiltrates networks via the well-known Log4Shell
2022-09-16 10:51:13
metasploit
metasploit
Log4Shell HTTP Header Injection
2021-12-29 14:10:07
ubuntu
ubuntu
Apache Log4j 2 vulnerability
2021-12-17 00:00:00
msrc
msrc
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 05:28:18
trendmicroblog
trendmicroblog
Patch Now: Apache Log4j Vulnerability Called Log4Shell Actively Exploited
2021-12-13 00:00:00
redhat
redhat
cisa_kev
cisa_kev
Apache Log4j2 Remote Code Execution Vulnerability
2021-12-10 00:00:00
Related for MOBILEIRON_LOG4SHELL.NBIN