~/products/amazon_web_services/log4j-cve-2021-44228-hotpatch

pipeline liveDigest Docs

Amazon Web Services Log4J-Cve-2021-44228-Hotpatch vulnerabilities

1 known vulnerability affecting amazon_web_services/log4j-cve-2021-44228-hotpatch.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2021-3100P3HIGHCVSS 8.8≥ unspecified, < 1.1-162022-04-19

CVE-2021-3100 [HIGH] CWE-250 CVE-2021-3100: The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permi The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM being patched, allowing it to escalate privileges.