Vulnerability CVE-2021-3100
Published: 2022-04-19   Modified: 2022-04-20

Description:
The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-12 didn??t mimic the permissions of the JVM being patched, allowing it to escalate privileges.

 References:
https://alas.aws.amazon.com/AL2/ALAS-2021-1732.html
https://alas.aws.amazon.com/ALAS-2021-1554.html
https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities
Copyright 2026, cxsecurity.com

 

Back to Top