Lucene search

Apache’s Fix for Log4Shell Can Lead to DoS Attacks

🗓️ 15 Dec 2021 14:19:04Reported by Elizabeth MontalbanoType

Apache Log4j's CVE-2021-44228 & CVE-2021-45046 & Patch Impac

Reporter	Title	Published	Views	Family All 199
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-4104, CVE-2021-45046)	13 Jan 202205:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in Apache Log4j shipped with IBM Tivoli Netcool/OMNIbus Common Integration Libraries (CVE-2021-4104, CVE-2021-45046, CVE-2021-44228)	13 Jun 202210:34	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Netcool/OMNIbus WebGUI is vulnerable to Apache log4j vulnerability (CVE-2021-44228)	23 Dec 202106:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Apache Log4j2 affect IBM Spectrum LSF Explorer and IBM Spectrum LSF Application Center	22 Dec 202106:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak System is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-45046, CVE-2021-44228)	22 Jun 202311:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache log4j affect the IBM WebSphere Application Server and IBM WebSphere Application Server Liberty (CVE-2021-4104, CVE-2021-45046)	21 Dec 202114:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Log4j affects WebSphere Application Server (CVE-2021-44228)	16 Dec 202115:24	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Master Data Management	27 Apr 202210:23	–	ibm
IBM Security Bulletins	Security Bulletin: MAS Monitor 8.4, 8.5, and 8.6 log4j	28 Mar 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics Predictive Insights impacted by Apache Log4j vulnerabilities (CVE-2021-4104, CVE-2021-45046)	30 Dec 202110:45	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-44228
threatpost	www.threatpost.com/zero-day-in-ubiquitous-apache-log4j-tool-under-active-attack/176937/
lunasec	www.lunasec.io/docs/blog/log4j-zero-day/
threatpost	www.threatpost.com/apache-log4j-log4shell-mutations/176962/
logging	www.logging.apache.org/log4j/2.x/changes-report.html
lists	www.lists.apache.org/thread/83y7dx5xvn3h5290q1twn16tltolv88f
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bugcrowd	www.bugcrowd.com/
riskbasedsecurity	www.riskbasedsecurity.com/2021/12/14/log4shell-log4j-vulnerability-attack-surface-variant-and-remediation/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Dec 2021 14:04Current

10High risk

Vulners AI Score10

CVSS29.3

CVSS310

EPSS0.972