NewsSiemens ProductCERT
SSA-784507 V1.0: Apache Log4j Vulnerability (CVE-2021-44832) via JDBC Appender - Impact to Siemens Products
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) contain a vulnerability (CVE-2021-44832) that could allow an attacker with permission to modify the logging configuration file to execute arbitrary code, when the JDBC Appender is…
Teaser aus der Quelle
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) contain a vulnerability (CVE-2021-44832) that could allow an attacker with permission to modify the logging configuration file to execute arbitrary code, when the JDBC Appender is…
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei Siemens ProductCERT lesenVerknüpfte Advisories
- CVE-2021-44832Improper Input Validation and Injection in Apache Log4j2
- CVE-2021-44832maven org.apache.logging.log4j:log4j-core: unzureichende Eingabevalidierung
- CVE-2021-44832maven org.apache.logging.log4j:log4j-core: unzureichende Eingabevalidierung
- CVE-2021-44832Siemens ProductCERT Advisory SSA-784507
- CVE-2021-44832[Update] Immediate Actions to Protect Against Exploitation of the Apache Java Logging Library Log4j Vulnerability
Betroffene Hersteller und Produkte
- Apache Software Foundation Apache Log4j Core
- Apache Software Foundation Apache Log4j2
- Cisco
- Debian Debian Linux
- Fedora Project Infrastructure Fedora
- Oracle Communications Brm - Elastic Charging Engine
- Oracle Oracle Communications Diameter Signaling Router (DSR)
- Oracle Oracle Communications Interactive Session Recorder
- Oracle Communications Offline Mediation Controller
- Oracle Oracle FLEXCUBE Private Banking
- Oracle Oracle Health Sciences Data Management Workbench
- Oracle Policy Automation
Mehr zu SSA-784507
Weitere Advisories
Quelle: https://cert-portal.siemens.com/productcert/pdf/ssa-784507.pdf
ID