cyber.hendryadrian.com

CVE

CVE-2021-45046

First Reported
Jun 21, 2022
Latest Reported
Jun 21, 2022
Articles
1
View articles →
IOC
16
View indicators →

CVE Enrichment

CVSS
9.0 CRITICAL
EPSS
99.98%
EPSS Percentile
99.98%
CISA KEV
YES — Known Exploited Vulnerability

Description

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.

Technical Details

CVSS Version
3.1
CNA / NVD Source
security@apache.org
Published
15-Dec-2021 02:15
Last Modified
17-Jun-2026 11:13
EPSS Date
2026-10-12
CWE
CWE-917

CVSS Vector

CVSS:3.1 AV:N / AC:H / PR:N / UI:N / S:C / C:H / I:H / A:H

CISA KEV Details

Date Added
2023-05-01
Remediation Due
2023-05-22
Known Ransomware Campaign Use
Known
Required Action
Apply updates per vendor instructions.
Notes
https://logging.apache.org/log4j/2.x/security.html; https://nvd.nist.gov/vuln/detail/CVE-2021-45046

Affected Products / Versions

References

Last enrichment sync: 13-Oct-2026 19:03
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

CVE (3)

CVE-2021-442281 related articleCVE-2021-448321 related articleCVE-2021-451051 related article

Malware (4)

AvosLocker1 related articleDarkComet1 related articleMimikatz1 related articleSliver1 related article

People (3)

Chris Neal1 related articleFlavio Costa1 related articleGuilherme Venere1 related article

Threat Actors (2)

Avos1 related articleAvosLocker1 related article

MITRE ATT&CK (4)

T10471 related articleT1059.0011 related articleT14861 related articleT15701 related article

Vendors (1)

Cisco1 related article

Products (16)

Adaptive Security Appliance1 related articleAnyDesk1 related articleCisco Duo1 related articleCisco Secure Email1 related articleCisco Secure Endpoint1 related articleCisco Secure Firewall1 related articleCisco Secure Malware Analytics1 related articleCisco Secure Web Appliance1 related articleESXi1 related articleMeraki MX1 related article

VIEW MORE

Tools (4)

Cobalt Strike1 related articleMimikatz1 related articleSliver1 related articleSoftPerfect Network Scanner1 related article

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.