Apache Releases Log4j Version 2.15.0 to Address Critical RCE Vulnerability Under Exploitation

guest · Jan 7, 2022

Researchers Find Log4Shell Type Flaw in H2 Database Console
January 7, 2022

As defenders continue the work of remediating the various Log4j vulnerabilities in their environments, researchers are beginning to discover similar flaws related to JNDI remote class loading in other tools. This week, researchers disclosed a JNDI-related vulnerability in the H2 database console that can allow unauthenticated remote code execution.

H2 is an open source database that is used in a wide range of projects and products, including IoT platforms.

“In a nutshell, the root cause is similar to Log4Shell – several code paths in the H2 database framework pass unfiltered attacker-controlled URLs to the javax.naming.Context.lookup function, which allows for remote codebase loading (AKA Java code injection AKA remote code execution),” Andrey Polkovnychenko and Shachar Menashe of JFrog wrote in a post explaining the bug.
Click to expand...

The H2 database is included in a huge number of other packages and apps, so the effects of this flaw could be widespread.
Click to expand...

ronjor · Apr 20, 2022

Serious Vulnerabilities Found in AWS's Log4Shell Hot Patches

By Ionut Arghire on April 20, 2022
Hot patches made available by Amazon Web Services (AWS) in response to the recent Log4j vulnerabilities could be exploited for privilege escalation or to escape containers, according to Palo Alto Networks.
Click to expand...

ronjor · Jun 23, 2022

Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems
Original release date: June 23, 2022

CISA and the United States Coast Guard Cyber Command (CGCYBER) have released a joint Cybersecurity Advisory (CSA) to warn network defenders that cyber threat actors, including state-sponsored advanced persistent threat (APT) actors, have continued to exploit CVE-2021-44228 (Log4Shell) in VMware Horizon® and Unified Access Gateway (UAG) servers to obtain initial access to organizations that did not apply available patches.
Click to expand...

The CSA provides information—including tactics, techniques, and procedures and indicators of compromise—derived from two related incident response engagements and malware analysis of samples discovered on the victims’ networks.
Click to expand...

CISA and CGCYBER encourage users and administrators to update all affected VMware Horizon and UAG systems to the latest versions. If updates or workarounds were not promptly applied following VMware’s release of updates for Log4Shell, treat all affected VMware systems as compromised. See joint CSA Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems for more information and additional recommendations.
Click to expand...

ronjor · Jul 16, 2022

Log4j software flaw ‘endemic,’ new cyber safety panel says

“Log4j is one of the most serious software vulnerabilities in history,” the board’s chairman, Department of Homeland Security Under Secretary Rob Silvers, told reporters Wednesday.
The Log4j flaw, made public late last year, lets internet-based attackers easily seize control of everything from industrial control systems to web servers and consumer electronics. The first obvious signs of the flaw’s exploitation appeared in Minecraft, a hugely popular online game owned by Microsoft.
Click to expand...

ronjor · Jul 18, 2022

CISA Updates Advisory on Cyber Actors Continued Exploitation of Log4Shell in VMware Horizon Systems

Original release date: July 18, 2022
CISA has updated the joint CISA-United States Coast Guard Cyber Command (CGCYBER) Cybersecurity Advisory AA22-174A: Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon, originally released June 23, 2022. The advisory now includes IOCs provided in Malware Analysis Report (MAR)-10382580-2.
Click to expand...

CISA and CGCYBER encourage users and administrators to update all affected VMware Horizon and Unified Access Gateway (UAG) systems to the latest versions. If updates or workarounds were not promptly applied following VMware’s release of updates for Log4Shell, treat all affected VMware systems as compromised. See the joint advisory for more information and additional recommendations.
Click to expand...

Log in or Sign up

Apache Releases Log4j Version 2.15.0 to Address Critical RCE Vulnerability Under Exploitation

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

Apache Releases Log4j Version 2.15.0 to Address Critical RCE Vulnerability Under Exploitation

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches