daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update vmware-vcenter-log4j-jndi-rce.yaml

patch-1
Ritik Chaddha 2022-07-16 22:35:37 +05:30
parent 10ad3459b6
commit 4add304837
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
vulnerabilities/vmware/vmware-vcenter-log4j-jndi-rce.yaml
View File

@ -3,13 +3,16 @@ id: vmware-vcenter-log4j-jndi-rce
info: info:
name: VMware VCenter Log4j JNDI RCE name: VMware VCenter Log4j JNDI RCE
author: _0xf4n9x_ author: _0xf4n9x_
severity: high severity: critical
description: A critical vulnerability in Apache Log4j identified by CVE-2021-44228 has been publicly disclosed that may allow for remote code execution in impacted VMware VCenter. description: |
A critical vulnerability in Apache Log4j identified by CVE-2021-44228 has been publicly disclosed that may allow for remote code execution in impacted VMware VCenter.
reference: reference:
- https://www.vmware.com/security/advisories/VMSA-2021-0028.html - https://www.vmware.com/security/advisories/VMSA-2021-0028.html
- https://github.com/advisories/GHSA-jfh8-c2jp-5v3q - https://github.com/advisories/GHSA-jfh8-c2jp-5v3q
- https://twitter.com/tnpitsecurity/status/1469429810216771589 - https://twitter.com/tnpitsecurity/status/1469429810216771589
tags: rce,jndi,log4j,vcenter,vmware - https://logging.apache.org/log4j/2.x/security.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-44228
tags: cve,cve2021,rce,jndi,log4j,vcenter,vmware,oast
requests: requests:
- raw: - raw: