cbcvebase.

Amazon Hotpatch vulnerabilities

1 known vulnerability affecting amazon/hotpatch.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2022-33915P4HIGHCVSS 7.0fixed in 1.3.52022-06-17
CVE-2022-33915 [HIGH] CVE-2022-33915: Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 or CVE-2021-45046; it provides a temporary mitigation to CVE-2021-44228 by
nvd
Amazon Hotpatch vulnerabilities | cvebase