It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.
Connections 62
has cited scope1 retained · stored CVE-2021-45046 → Apache Software Foundation · Apache Log4j0458fe3e-7f67-4c92-85f5-aca3ef503c12
has environmental constraint1 retained · stored CVE-2021-45046 → siemens · 6bk1602-0aa12-0tp080b8c184-1d7c-4477-8de2-dad8d35de14b
has environmental constraint1 retained · stored CVE-2021-45046 → siemens · 6bk1602-0aa42-0tp0478e9bd7-a4d4-4963-abe5-6e46d39a8cbe
has environmental constraint1 retained · stored CVE-2021-45046 → siemens · 6bk1602-0aa22-0tp02fe02641-52ed-40fb-87b0-d0f1940c16f9
has environmental constraint1 retained · stored CVE-2021-45046 → siemens · sppa-t3000_ses30002bd910f7-5bda-4383-ab99-99909a8f8db7
has environmental constraint1 retained · stored CVE-2021-45046 → siemens · 6bk1602-0aa52-0tp09020f436-38eb-491e-8808-8c41f8099356
has environmental constraint1 retained · stored CVE-2021-45046 → siemens · 6bk1602-0aa32-0tp0ae49459b-d0fa-4ed8-b2a2-f0209968e110
has vulnerable target scope2 retained · stored CVE-2021-45046 → siemens · sentron_powermanager26d2591e-b3c9-4635-b493-0a706f8e17239f507454-9ca7-4032-aa5a-69ca30a7f64d
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · industrial_edge_managementb6efe51e-c323-46b9-aec0-06e35653f37d
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · comos5c71b06d-9fba-4b38-b265-31c1d9bed70a
has vulnerable target scope4 retained · stored CVE-2021-45046 → siemens · spectrum_power_43af2cf4a-647a-451f-8f24-7fd8df950e5f3c0a5b71-1f69-4daa-b186-b42f052405e188845a8d-302e-4ad8-bb41-9f9fa314471f9878beee-06c3-4b37-aa48-335291cbe7bd
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · tracealertserverplus3cb823a0-18ab-432e-bbe3-e1980a0a5c36
has vulnerable target scope1 retained · stored CVE-2021-45046 → cvat · computer_vision_annotation_toold728295a-e449-43da-baaa-9fbcc013c410
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · teamcenterc2e0cb7d-a958-4ca7-b0a2-467bed4dbe2e
has vulnerable target scope1 retained · stored CVE-2021-45046 → intel · system_studioe510c3eb-ab1f-44be-b45c-71b5812e8b4c
has vulnerable target scope4 retained · stored CVE-2021-45046 → siemens · spectrum_power_746b21870-3b49-4e9b-9f01-229f9534c402904ec97a-1840-4cac-a470-fcf913175defaea93adc-fae5-48f5-8e00-d4bc4167a9dbb8b400f3-0d2d-43a5-9df4-fe6e7f1abed5
has vulnerable target scope5 retained · stored CVE-2021-45046 → siemens · desigo_cc_advanced_reports01ff20b1-3c58-4c10-8f2b-13a7a5327e805fa41671-cbd1-4c58-93a8-8ec5807dbe5f78ed805c-cc8d-4001-b003-4d69d79c284fb01f92f9-926f-4c11-b0a0-c6a4fbdf63d9f274ac66-cebd-411f-8216-bc040ba242e2
has vulnerable target scope2 retained · stored CVE-2021-45046 → siemens · desigo_cc_info_center4157eb18-e5b4-45fe-8a6b-cc6f38ef0278c4e59331-a83b-46fb-8c16-b8c0a6a4d557
has vulnerable target scope2 retained · stored CVE-2021-45046 → debian · debian_linux5bed7e57-24cc-4b50-a5d5-5f79712c0cc07b47cbd8-19b2-43ee-859c-aad6cffd66cf
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · e-car_operation_center384f1fab-7104-411a-9243-142ef4fd0da5
has vulnerable target scope1 retained · stored CVE-2021-45046 → intel · sensor_solution_firmware_development_kitef454814-2173-4a19-80ba-cf31a784c6b7
has vulnerable target scope1 retained · stored CVE-2021-45046 → intel · datacenter_manager38b82a79-310f-4627-97ef-9db8ffdfdb30
has vulnerable target scope2 retained · stored CVE-2021-45046 → siemens · siveillance_identity0da13b16-753a-47b3-8d91-2c35cee36429db87389f-4e3d-4822-8a66-0d6437bd44e8
has vulnerable target scope6 retained · stored CVE-2021-45046 → apache · log4j1e90113e-8706-4424-84a5-85d717ecb2c63a551670-7851-4ce1-9b7b-953fab3c43a2758599d4-619d-4689-a73e-a141e279d789894b9b6e-1557-47b3-9452-98f5fccfb4becdb2e689-e6e8-4aa1-a431-28901459dc0be884e059-ae1e-4abc-907e-a30821749a8d
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · 6bk1602-0aa32-0tp0_firmware584b5798-17b5-4c95-bd46-783d3530bd9b
has vulnerable target scope1 retained · stored CVE-2021-45046 → intel · system_debuggerd469a31c-7917-4ee8-8e28-59b633f91ee9
has vulnerable target scope2 retained · stored CVE-2021-45046 → siemens · energyip_prepayc9c19269-4952-467e-8178-45af1c03d7f9e7f3d0f3-d8d6-4ba0-85dd-739644f523d4
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · sppa-t3000_ses3000_firmwarea689c91e-1e91-444a-8222-887c2c97708d
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · energy_engage019b240b-ce43-41f6-93b4-9a9be9e2ac0c
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · 6bk1602-0aa42-0tp0_firmwaref6e6c0e0-60fc-4189-90bf-f1d7295b9c68
has vulnerable target scope3 retained · stored CVE-2021-45046 → siemens · siguard_dsa4d74b8d5-6752-4c69-8a6f-73628bfa19337fd6d6b9-a24d-4f60-80d3-b28bc5896f2ba3c16965-9bb0-42a4-bd93-62ad2a1b552b
has vulnerable target scope1 retained · stored CVE-2021-45046 → intel · oneapiac6577ea-1186-422b-8f09-e631682f4429
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · logo!_soft_comfort6938bd52-6f0d-4cf3-a877-1dd02f5ca364
has vulnerable target scope3 retained · stored CVE-2021-45046 → siemens · captial17f08836-504f-4d1c-a102-6315c1ec38aa24fea1fc-1ac9-419e-8e9c-9d94847ecda997af0f36-1bd2-47d8-921a-4b7dea2f0ed9
has vulnerable target scope1 retained · stored CVE-2021-45046 → sonicwall · email_security11693db3-4aaa-495e-a068-52156bf5c2d8
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · siveillance_viewpoint7fe63ab5-6643-460a-81ac-024af5b72d48
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · 6bk1602-0aa22-0tp0_firmware93487be7-3128-4a11-aebf-d154cf966d44
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · operation_scheduler2b44996c-4ba4-4305-a317-6cdfc99702be
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · industrial_edge_management_huba05e6c49-db99-479b-82fd-334a0dd88f11
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · siveillance_control_pro5a6be261-c464-4b0d-a44c-dccb1524572c
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · 6bk1602-0aa12-0tp0_firmwaref9db2315-340e-4da6-aca2-17a8bc2a3489
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · head-end_system_universal_device_integration_systemfab970a3-2947-4dbe-b88a-d3f6172d92ff
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · solid_edge_cam_pro50b7be6e-da7e-4136-afd2-33c1a2de681a
has vulnerable target scope4 retained · stored CVE-2021-45046 → siemens · energyip2c06b03f-afdd-4b8c-9afc-e8733dfc23664cfb31df-571f-4782-abca-f86bacc8b1718b0fe09a-6110-469c-a4ff-6b844c4b369cb18ca486-3f47-4737-9981-1e5bf3e5617e
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · xpedition_package_integratora5f92920-62cb-4464-8705-5d070a6702ae
has vulnerable target scope4 retained · stored CVE-2021-45046 → siemens · solid_edge_harness_design2c4679b8-42d3-4793-8628-f7b809ad932f8552d409-a41c-487b-8606-6d82ab5b1097cb21be9a-2b06-4516-a6ba-5cab1f560ddecc9e0cb5-790f-46cb-958d-294da3e3ba49
has vulnerable target scope1 retained · stored CVE-2021-45046 → intel · secure_device_onboardcaa40722-ac3d-41b5-a0a5-d39584767d95
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · 6bk1602-0aa52-0tp0_firmware55f63129-2554-4cd7-aecd-38e683f407b1
has vulnerable target scope2 retained · stored CVE-2021-45046 → fedoraproject · fedora1820e30a-3438-4cfd-b281-7af3d99910fbcd6e18d3-77c0-4478-b2ab-866857705570
has vulnerable target scope1 retained · stored CVE-2021-45046 → intel · audio_development_kit7658a67c-5d22-4d43-85ad-bbaf1b5d8c76
has vulnerable target scope4 retained · stored CVE-2021-45046 → siemens · vesys7cbdc9ff-c9e9-4489-bb9d-b1bfc3fc2196e30556c9-f3cc-4d2b-8d5c-15014801b1efe30c5289-bef3-475a-a909-de53e8e7fd02ffe720c6-1111-473c-947d-cfb6d2c37c62
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · siveillance_command744384b6-9e88-4306-ad64-7b983dcecf1a
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · nxd4079e8d-efd0-44a7-a3a5-b9a2f92ef169
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · mindsphere2f61fd94-12d9-4fc2-9f13-6ee42d321d19
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · mendixf125dbb8-54df-48a3-b1c4-e150454a5685
has vulnerable target scope2 retained · stored CVE-2021-45046 → siemens · sipass_integrated6613d403-5738-488b-95e9-f7f11828d0a06a904420-58bc-4101-acd2-49c111595288
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · gma-manager8a5091b3-1f4b-425c-a719-61f9282322b7
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · siveillance_vantage27d91185-fda2-4801-a3e5-194c17f9a253
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · opcenter_intelligencede0dc1cb-2e62-4473-abec-8d37eb6e8a0a
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · xpedition_enterprise953ddd40-e51a-4961-a1e2-576b550c9c9c
has vulnerable target scope1 retained · stored CVE-2021-45046 → intel · genomics_kernel_librarya76b56bb-672f-455a-90ed-44d080c1966f
has vulnerable target scope1 retained · stored CVE-2021-45046 → siemens · navigator676b36fe-7fcb-40f8-afb7-704b5b04b6b5