CVE-2021-45046 — 脆弱性インテリジェンス

Apache — Log4j2

公表日: 2021-12-14T16:55:09.000Z

CVSS

9

CISA KEV

既知の悪用を確認

情報源の原文（翻訳ではありません）

Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.

情報源

• Apache Log4j2 Deserialization of Untrusted Data Vulnerability
• Original advisory
• Original advisory
• CVE-2021-45046