AmazonLog4jhotpatch
2 matches found
CVE-2022-0070
CVE-2022-0070 concerns an issue in the Apache Log4j 2.x hotpatch package (log4j-cve-2021-44228-hotpatch) used on Amazon Linux platforms. The connected advisories describe a race condition in hotpatch versions prior to 1.3-5 that could enable local privilege escalation, by the hotpatcher executing...
8.8CVSS10AI score0.00374EPSS
Save