CVE-2021-44832

high-risk

Published 2021-12-28

Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.

Do I need to act?

50.6% chance of exploitation in next 30 days

EPSS score — higher than 49% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.6/10 Medium

NETWORK / HIGH complexity

Affected Products (20)

Log4J

Communications Diameter Signaling Router

Communications Interactive Session Recorder

Primavera Gateway

Primavera P6 Enterprise Project Portfolio Management

Primavera Unifier

Retail Assortment Planning

Retail Fiscal Management

Affected Vendors

Cisco Debian Apache Oracle Fedoraproject

References (24)

Mailing List http://www.openwall.com/lists/oss-security/2021/12/28/1

Third Party Advisory https://cert-portal.siemens.com/productcert/pdf/ssa-784507.pdf

Issue Tracking https://issues.apache.org/jira/browse/LOG4J2-3293

Mailing List https://lists.apache.org/thread/s1o5vlo78ypqxnzn6p8zf6t9shtq5143

Mailing List https://lists.debian.org/debian-lts-announce/2021/12/msg00036.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.netapp.com/advisory/ntap-20220104-0001/

Third Party Advisory https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-a...

Patch https://www.oracle.com/security-alerts/cpuapr2022.html

Patch https://www.oracle.com/security-alerts/cpujan2022.html

Patch https://www.oracle.com/security-alerts/cpujul2022.html

Mailing List http://www.openwall.com/lists/oss-security/2021/12/28/1

Third Party Advisory https://cert-portal.siemens.com/productcert/pdf/ssa-784507.pdf

Issue Tracking https://issues.apache.org/jira/browse/LOG4J2-3293

Mailing List https://lists.apache.org/thread/s1o5vlo78ypqxnzn6p8zf6t9shtq5143

Mailing List https://lists.debian.org/debian-lts-announce/2021/12/msg00036.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.netapp.com/advisory/ntap-20220104-0001/

and 4 more references

/ 100

high-risk

Severity 20/34 · Moderate

Exploitability 18/34 · Moderate

Exposure 25/34 · High