Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.VMWARE_VCENTER_LOG4SHELL.NBIN
HistoryDec 13, 2021 - 12:00 a.m.

VMware vCenter Log4Shell Direct Check (CVE-2021-44228) (VMSA-2021-0028)

2021-12-1300:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
199
JSON

A remote code execution vulnerability exists in VMWare vCenter in the bundled Apache Log4j logging library. Apache Log4j is vulnerable due to insufficient protections on message lookup substitutions when dealing with user controlled input. A remote, unauthenticated attacker can explolit this, via a web request, to execute arbitrary code with the permission level of the running Java process.

Binary data vmware_vcenter_log4shell.nbin
VendorProductVersionCPE
vmwarevcenter_servercpe:/a:vmware:vcenter_server

Related

githubexploit 44
trellix 1
wallarmlab 2
veracode 1
trendmicroblog 1
hivepro 1
ibm 55
threatpost 38
nessus 10
hackerone 3
qualysblog 2
cisa 1
rapid7blog 10
packetstorm 4
impervablog 4
amd 1
kaspersky 2
mssecure 1
msrc 3
talosblog 1
cve 1
redhat 3
akamaiblog 1
osv 1
fedora 1
cisa_kev 1
malwarebytes 1
thn 2
suse 1
metasploit 2
githubexploit
githubexploit
Exploit for Expression Language Injection in Apache Log4J
2021-12-14 14:51:26
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-13 11:29:57
Exploit for Improper Input Validation in Apache Log4J
2021-12-17 08:48:59
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
wallarmlab
wallarmlab
Update on Log4Shell (CVE-2021-44228)
2021-12-10 20:22:36
5 things you must know about Log4Shell
2021-12-11 01:22:39
veracode
veracode
Remote Code Execution (RCE)
2021-12-10 15:09:45
trendmicroblog
trendmicroblog
Patch Now: Apache Log4j Vulnerability Called Log4Shell Actively Exploited
2021-12-13 00:00:00
hivepro
hivepro
Iranian hackers leveraged Log4Shell to penetrate US federal agency
2022-11-17 12:28:57
ibm
ibm
Security Bulletin: IBM Netcool Agile Service Manager is affected by a vulnerability in Apache Log4j (CVE-2021-44228)
2021-12-23 18:45:10
Security Bulletin: Apache Log4j Vulnerability Affects IBM Sterling Control Center (CVE-2021-44228)
2021-12-17 18:27:06
Security Bulletin: IBM Cloud Pak for Applications is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44228)
2021-12-22 06:59:57
threatpost
threatpost
Free HermeticRansom Ransomware Decryptor Released
2022-03-04 16:56:27
Cyberattackers Target UPS Back-Up Power Devices in Mission-Critical Environments
2022-03-30 17:14:57
DarkHotel APT Targets Wynn, Macao Hotels to Rip Off Guest Data
2022-03-18 18:53:40
nessus
nessus
Ubuntu 16.04 ESM : Apache Log4j 2 vulnerability (USN-5192-2)
2021-12-17 00:00:00
FreeBSD : OpenSearch -- Log4Shell (4b1ac5a3-5bd4-11ec-8602-589cfc007716)
2021-12-13 00:00:00
FreeBSD : graylog -- include log4j patches (3fadd7e4-f8fb-45a0-a218-8fd6423c338f)
2021-12-13 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: ██████████ running a vulnerable log4j
2021-12-11 00:16:38
U.S. Dept Of Defense: ███ ████████ running a vulnerable log4j
2021-12-31 00:55:49
Judge.me : Log4j RCE on https://judge.me/reviews
2021-12-15 10:30:12
qualysblog
qualysblog
Log4Shell – Follow This Multi-Layered Approach for Detection and Remediation
2021-12-28 18:00:00
Qualys Study Reveals How Enterprises Responded to Log4Shell
2022-03-18 13:00:00
cisa
cisa
Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems
2022-06-23 00:00:00
rapid7blog
rapid7blog
What's New in InsightVM and Nexpose: Q1 2022 in Review
2022-04-19 17:52:17
[Security Nation] Mike Hanley of GitHub on the Log4j Vulnerability
2022-01-19 21:47:30
3 Reasons to Join Rapid7’s Cloud Security Summit
2022-03-09 17:06:13
packetstorm
packetstorm
Log4Shell HTTP Header Injection
2022-01-12 00:00:00
Intel Data Center Manager 5.1 Local Privilege Escalation
2022-12-09 00:00:00
MobileIron Log4Shell Remote Command Execution
2022-08-03 00:00:00
impervablog
impervablog
Analytics Are Essential for Effective Database Security
2022-01-13 15:23:02
Continuing to Stay Ahead of CVE-2021-44228: Addressing Your Top Questions
2021-12-14 22:55:49
5 Things We’ve Learned About CVE-2021-44228
2021-12-17 06:44:55
amd
amd
AMD Response to Log4j (Log4Shell) Vulnerability
2021-12-15 00:00:00
kaspersky
kaspersky
KLA12395 RCE vulnerability in Microsoft SQL Server
2021-12-16 00:00:00
KLA12392 RCE vulnerability in Microsoft Azure
2021-12-16 00:00:00
mssecure
mssecure
MERCURY and DEV-1084: Destructive attack on hybrid environment
2023-04-07 16:00:00
msrc
msrc
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 05:28:18
CVE-2021-44228 Apache Log4j 2 に対するマイクロソフトの対応
2021-12-12 08:00:00
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 08:00:00
talosblog
talosblog
How CVSS 4.0 changes (or doesn’t) the way we see vulnerability severity
2024-02-21 13:54:48
cve
cve
CVE-2021-44228
2021-12-10 10:15:00
redhat
redhat
(RHSA-2021:5130) Critical: Red Hat Integration Camel-K 1.6.2 release and security update
2021-12-14 17:51:25
(RHSA-2021:5126) Critical: Red Hat Integration Camel Extensions for Quarkus GA security update
2021-12-14 16:15:45
(RHSA-2021:5093) Critical: Red Hat build of Eclipse Vert.x 4.1.5 SP1 security update
2021-12-14 15:57:34
akamaiblog
akamaiblog
Threat Intelligence on Log4j CVE: Key Findings and Their Implications
2021-12-17 19:30:00
osv
osv
Critical vulnerability in log4j may affect generated PEAR projects
2021-12-16 21:01:51
fedora
fedora
[SECURITY] Fedora 34 Update: log4j-2.16.0-1.fc34
2021-12-22 01:14:26
cisa_kev
cisa_kev
Apache Log4j2 Remote Code Execution Vulnerability
2021-12-10 00:00:00
malwarebytes
malwarebytes
What SMBs can do to protect against Log4Shell attacks
2021-12-15 20:59:31
thn
thn
Iranian Hackers Compromised a U.S. Federal Agency's Network Using Log4Shell Exploit
2022-11-17 06:22:00
Hackers Exploit Log4j Vulnerability to Infect Computers with Khonsari Ransomware
2021-12-14 11:09:00
suse
suse
Security update for log4j (important)
2021-12-13 00:00:00
metasploit
metasploit
MobileIron Core Unauthenticated JNDI Injection RCE (via Log4Shell)
2022-07-29 17:31:15
Log4Shell HTTP Scanner
2021-12-15 13:45:24
JSON
Related for VMWARE_VCENTER_LOG4SHELL.NBIN
githubexploit44trellix1wallarmlab2veracode1trendmicroblog1hivepro1ibm55threatpost38nessus10hackerone3qualysblog2cisa1rapid7blog10packetstorm4impervablog4amd1kaspersky2mssecure1msrc3talosblog1cve1redhat3akamaiblog1osv1fedora1cisa_kev1malwarebytes1thn2suse1metasploit2