Remote Code Execution Vulnerability in Apache Java logging library Log4j (Severity: High)

Overview

CERT-In has reported a vulnerability in Apache Java logging library Log4j which could allow a remote attacker to gain full control on the targeted servers.

Description

This Vulnerability exists in Apache Java logging library Log4j due to logging of user-controlled strings. A remote attacker could exploit this vulnerability by injecting a specially crafted malicious payload. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code and lead to gain full control on the targeted servers.

Note: This vulnerability is being actively exploited in the wild.

Solution
Apply appropriate patches/mitigation steps as mentioned by various vendors

References

https://logging.apache.org/log4j/2.x/security.html

https://www.lunasec.io/docs/blog/log4j-zero-day/

https://github.com/tangxiaofeng7/apache-log4j-poc

https://www.randori.com/blog/cve-2021-44228/

https://www.crowdstrike.com/blog/log4j2-vulnerability-analysis-and-mitigation-recommendations

https://kc.mcafee.com/corporate/index?page=content&id=KB9509

https://cert-in.org.in/