Threat intelligence report · CISA KEV

CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability

Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution. Required action: For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

· high severity · unattributed attribution

Evidence and provenance

Original source
CISA KEV report ↗
Published
2021-12-10T00:00:00Z
Confidence basis
No actor match
Record ID
fb377e3be07995cb3f98

Vulnerabilities

CVE-2021-44228

Affected sectors

technology

Use and citation

Verify the original report before making operational decisions. Cite this permanent page together with the original source, publication date, confidence level, and review status.