V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
BDU:2021-06325
BDU
HighConfirmedExploit available

Уязвимость библиотеки журналирования Java-программ Log4j существует из-за недостаточной проверки входных данных. Эксплуатация уязвимости мо…

CVSS
7.5
High
EPSS
0.00
p0
Published
2021-01-01
Updated
2021-01-01
Description

Уязвимость библиотеки журналирования Java-программ Log4j существует из-за недостаточной проверки входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании с помощью специально сформированного рекурсивного запроса

Tags · CWE
Pre-auth
Affected products
Apache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4jApache software foundation Log4j
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
2021-01-01
Published
2021-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: N
None (N)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: N
None (N)
Integrity Impact
I: N
None (N)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
CVE-2021-45105
github-poc · https://github.com/dileepdkumar/https-github.com-pravin-pp-log4j2-CVE-2021-45105-1
Enterprise
Affected products
Red Hat
Openshift Container PlatformJboss Enterprise Application PlatformJboss FuseRed Hat Single Sign-onOpenshift Application RuntimesRed Hat Process AutomationRed Hat Descision ManagerRed Hat Integration Camel KRed Hat Integration Camel QuarkusData Grid+3
Apache
Log4j
Netapp
Snap Creator FrameworkCloud ManagerOntap Tools For Vmware Vsphere
ProductVendorStatus
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
log4japache software foundationTracked
Showing first 20 of 140
Source databases
BDU
Related vulnerabilities
CVE-2021-45105