EXPOSURES › CVE-2021-44228
CVE-2021-44228
CRITICAL ⌖ ON CISA KEV · EXPLOITED
DETAIL
⚡ RCE
◐ ZERO-DAY
⌖ EXPLOITED IN THE WILD
SHAME 95/100
ransomwarerceexploited-in-wild
The Log4j2 vulnerability allowed attackers to execute arbitrary code on vulnerable systems remotely.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
PLAYERS IMPLICATED
DESCRIPTION
Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.60
Apache Log4j2 vulnerability caused massive remote code execution risks, widely condemned by security press and authorities for its severity and impact on global infrastructure.
Severe condemnation of Apache Log4j2's JNDI vulnerability allowing remote code execution, widely recognized as a critical failure in vendor security practices.
"Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution."
No direct coverage of Apache Log4j2; source focuses on McKesson breach unrelated to Log4j2.
No direct coverage of Apache Log4j2; source focuses on PaperCut attack unrelated to Log4j2.
No direct coverage of Apache Log4j2; source focuses on McKesson breach unrelated to Log4j2.
No direct coverage of Apache Log4j2; source focuses on McKesson breach unrelated to Log4j2.
No direct coverage of Apache Log4j2; source focuses on McKesson breach unrelated to Log4j2.
AFFECTED FEDRAMP PRODUCTS · 10
| PRODUCT | STATUS |
|---|---|
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Cloud Insights NetApp |
In Process |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| Mendix Cloud for Government Siemens Government Technologies |
In Process |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |