CVE-2021-44228 - Log4Shell - Apache Log4j2 JNDI RCE
Unauthenticated RCE via JNDI lookup in logged strings (${jndi:ldap://...}). Affected a vast swath of Java software.
Tags: rce, jndi, java, log4j
- Product
- Apache Log4j 2
- Severity
- critical (CVSS 10)
- Published / added
- 2021-12
- Signals
- CISA KEV