VDB

BDU%3A2021-05969

BDU%3A2021-05969 PUBLISHED CVSS 10 CRITICAL

Уязвимость компонента JNDI библиотеки журналирования Java-программ Apache Log4j2, позволяющая нарушителю выполнить произвольный код

Risk Scores

CVSS 2.0
10

Affected Products

VendorProductVersions
Cisco Systems Inc., Сообщество свободного программного обеспечения, Siemens AG, Red Hat Inc., ООО «Ред Софт», NetApp Inc., Microsoft Corp, АО «Концерн ВНИИНС», SonicWall, Juniper Networks Inc., Dell Technologies, Apache Software Foundation, АО "НППКТ", ООО «Юбитех»Cisco Identity Services Engine, Debian GNU/Linux, Cisco Registered Envelope Service, Cisco Umbrella, LOGO! Soft Comfort, Cisco Evolved Programmable Network Manager, OpenShift Container Platform, Jboss Fuse, РЕД ОС (запись в едином реестре российских программ №3751), Oncommand Insight, OpenShift Application Runtimes, Red Hat Descision Manager, JBoss A-MQ Streaming, Cisco Webex Meetings, Red Hat OpenStack Platform, JBoss EAP, CodeReady Studio, A-MQ Clients, Data Grid, Cisco DNA Center, Azure Spring Cloud, Red Hat build of Quarkus, Red Hat Integration Camel K, UCS Director, Red Hat Integration Camel Quarkus, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177), Email Security, Cisco Advanced Web Security Reporting Application, Cisco CloudCenter Suite Admin, Crosswork Change Automation, Integrated Management Controller (IMC) Supervisor, Intersight Virtual Appliance, Network Services Orchestrator, Cisco Nexus Dashboard, Cisco WAN Automation Engine (WAE), Catalyst SD-WAN Manager, Cisco BroadCloud, Cisco Computer Telephony Integration Object Server (CTIOS), Enterprise Chat and Email, Cisco Packaged Contact Center Enterprise, Cisco Unified Contact Center Enterprise, Cisco Unified SIP Proxy Software, Video Surveillance Manager, Cisco Kinetic for Cities, Cisco Unified Communications Manager Cloud, Cisco Webex Cloud-Connected UC (CCUC), Cisco Managed Services Accelerator, Cisco ThousandEyes Recorder, OpenShift Logging, Red Hat JBoss Enterprise Application Platform Expansion Pack, Cloud Manager, ONTAP Tools for VMware vSphere, SnapCenter Plug-in, Brocade SAN Navigator (SANnav), Networks NorthStar Controller Application, Juniper Networks Paragon Insights, Juniper Networks Paragon Pathfinder, Juniper Networks Paragon Planner, Capital, Comos Desktop App, Desigo CC Advanced Reporting, Desigo CC Info Center, E-Car OC Cloud Application, EnergyIP Prepay, GMA-Manager, HES UDIS, Industrial Edge Management App (IEM-App), Industrial Edge Management OS (IEM-OS), Industrial Edge Manangement Hub, Mendix Applications, Mindsphere Cloud Application, Siemens NX, Opcenter Intelligence, Operation Scheduler, SIGUARD DSA, SIMATIC WinCC, Siveillance Command, Siveillance Control Pro, Siveillance Identity, Siveillance Vantage, Solid Edge Wiring Harness Design, Spectrum Power 4, Teamcenter Suite, VeSys, Xpedition EDM Client, Xpedition EDM Server, Xpedition Package Integrator, EMC Connectrix SANnav, Enterprise Hybrid Cloud, EMC Enterprise Storage Analytics for vRealize Operations, Storage Analytics for vRealize Operations, VxRail, Wyse Management Suite, Log4j, Azure Application Insights Java SDK, Azure Data Lake Store Java tool, Azure Data Lake Store Java client SDK, Azure DevOps Server, Azure DevOps, Team Foundation Server, SQL Server 2019 Big Data Clusters, Azure VMware Solution, Azure Databricks, Azure Arc-enabled Data Services, Minecraft Java Edition, Defender for IoT, Events Hub Extension, Cosmos DB Kafka Connector, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), UBLinux (запись в едином реестре российских программ №6874)

Timeline

  • Jun 28, 2021 PoC Published
  • Dec 11, 2021 PoC Published
  • Dec 13, 2021 CVE Published
  • Dec 13, 2021 PoC Published
  • Jun 7, 2022 PoC Published
  • Sep 16, 2022 PoC Published
  • Nov 21, 2023 CVE Updated
  • Nov 21, 2023 PoC Published
  • Dec 8, 2023 PoC Published
  • Dec 11, 2023 PoC Published
  • Mar 1, 2024 PoC Published
  • Apr 5, 2024 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›