Exploited
critical
10
CWE
20 400 502 917
Advisory Published
Advisory Published
Advisory Published
Updated

CVE-2021-44228: Apache log4j2 log messages substitution (CVE-2021-44228)

First published: Fri Dec 10 2021(Updated: )

# Summary Log4j versions prior to 2.16.0 are subject to a remote code execution vulnerability via the ldap JNDI parser. As per [Apache's Log4j security guide](https://logging.apache.org/log4j/2.x/security.html): Apache Log4j2 <=2.14.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.16.0, this behavior has been disabled by default. Log4j version 2.15.0 contained an earlier fix for the vulnerability, but that patch did not disable attacker-controlled JNDI lookups in all situations. For more information, see the `Updated advice for version 2.16.0` section of this advisory. # Impact Logging untrusted or user controlled data with a vulnerable version of Log4J may result in Remote Code Execution (RCE) against your application. This includes untrusted data included in logged errors such as exception traces, authentication failures, and other unexpected vectors of user controlled input. # Affected versions Any Log4J version prior to v2.15.0 is affected to this specific issue. The v1 branch of Log4J which is considered End Of Life (EOL) is vulnerable to other RCE vectors so the recommendation is to still update to 2.16.0 where possible. ## Security releases Additional backports of this fix have been made available in versions 2.3.1, 2.12.2, and 2.12.3 ## Affected packages Only the `org.apache.logging.log4j:log4j-core` package is directly affected by this vulnerability. The `org.apache.logging.log4j:log4j-api` should be kept at the same version as the `org.apache.logging.log4j:log4j-core` package to ensure compatability if in use. # Remediation Advice ## Updated advice for version 2.16.0 The Apache Logging Services team provided updated mitigation advice upon the release of version 2.16.0, which [disables JNDI by default and completely removes support for message lookups](https://logging.apache.org/log4j/2.x/changes-report.html#a2.16.0). Even in version 2.15.0, lookups used in layouts to provide specific pieces of context information will still recursively resolve, possibly triggering JNDI lookups. This problem is being tracked as [CVE-2021-45046](https://nvd.nist.gov/vuln/detail/CVE-2021-45046). More information is available on the [GitHub Security Advisory for CVE-2021-45046](https://github.com/advisories/GHSA-7rjr-3q55-vv33). Users who want to avoid attacker-controlled JNDI lookups but cannot upgrade to 2.16.0 must [ensure that no such lookups resolve to attacker-provided data and ensure that the the JndiLookup class is not loaded](https://issues.apache.org/jira/browse/LOG4J2-3221). Please note that Log4J v1 is End Of Life (EOL) and will not receive patches for this issue. Log4J v1 is also vulnerable to other RCE vectors and we recommend you migrate to Log4J 2.16.0 where possible.

Credit: CVE-2019-14379 CVE-2021-44228 security@apache.org security@apache.org security@apache.org

Affected SoftwareAffected VersionHow to fix
debian/apache-log4j1.2
1.2.17-8+deb10u2
1.2.17-8+deb10u1
1.2.17-10+deb11u1
1.2.17-11
debian/apache-log4j2
2.17.1-1~deb10u1
2.17.0-1~deb10u1
2.17.1-1~deb11u1
2.17.0-1~deb11u1
2.19.0-2
debian/apache-log4j2<=2.13.3-1<=2.7-2<=2.11.1-2
2.15.0-1
2.15.0-1~deb11u1
2.15.0-1~deb10u1
maven/org.apache.logging.log4j:log4j-core>=2.0-beta9<2.3.1
2.3.1
maven/uk.co.nichesolutions.logging.log4j:log4j-core=2.6.3-CUSTOM
maven/org.xbib.elasticsearch:log4j=6.3.2.1
maven/com.guicedee.services:log4j-core<=1.2.1.2-jre17
maven/org.apache.logging.log4j:log4j-core>=2.4<2.12.2
2.12.2
maven/org.apache.logging.log4j:log4j-core>=2.13.0<2.15.0
2.15.0
redhat/log4j<2.15.0
2.15.0
Apache Log4j
Apple Xcode<13.3
13.3
Apache Log4j>=2.0.1<2.3.1
Apache Log4j>=2.4.0<2.12.2
Apache Log4j>=2.13.0<2.15.0
Apache Log4j=2.0
Apache Log4j=2.0-beta9
Apache Log4j=2.0-rc1
Apache Log4j=2.0-rc2
All of
Siemens SPPA-T3000 SES3000 Firmware
Siemens SPPA-T3000
Siemens Capital<2019.1
Siemens Capital=2019.1
Siemens Capital=2019.1-sp1912
Siemens COMOS
Siemens Desigo CC=4.0
Siemens Desigo CC=4.1
Siemens Desigo CC=4.2
Siemens Desigo CC=5.0
Siemens Desigo CC=5.1
Siemens Desigo CC=5.0
Siemens Desigo CC=5.1
Siemens e-car operation center<2021-12-13
Siemens Energy Engage=3.1
Siemens Energy Engage=8.5
Siemens Energy Engage=8.6
Siemens Energy Engage=8.7
Siemens Energy Engage=9.0
Siemens EnergyIP=3.7
Siemens EnergyIP=3.8
Siemens GMA-Manager<8.6.2j-398
Siemens Head-End System Universal Device Integration System
Siemens Industrial Edge Management Hub
Siemens Industrial Edge Management<2021-12-13
Siemens LOGO! Soft Comfort
Mendix
Siemens MindSphere<2021-12-11
Siemens Navigator<2021-12-13
Siemens NX
Siemens Opcenter Intelligence<=3.2
Siemens Operation Scheduler<=1.1.3
Siemens Sentron Powermanager=4.1
Siemens Sentron Powermanager=4.2
Siemens SiGuard DSA=4.2
Siemens SiGuard DSA=4.3
Siemens SiGuard DSA=4.4
SiPass Integrated=2.80
SiPass Integrated=2.85
Siemens Siveillance Command<=4.16.2.1
Siemens Siveillance Control Pro
Siemens Siveillance Identity=1.5
Siemens Siveillance Identity=1.6
Siemens Siveillance Vantage
Siemens Siveillance Viewpoint
Siemens Solid Edge
Siemens Solid Edge Harness Design<2020
Siemens Solid Edge Harness Design=2020
Siemens Solid Edge Harness Design=2020
Siemens Solid Edge Harness Design=2020-sp2002
Siemens Spectrum Power 4<4.70
Siemens Spectrum Power 4=4.70
Siemens Spectrum Power 4=4.70-sp7
Siemens Spectrum Power 4=4.70-sp8
Siemens Spectrum Power 7<2.30
Siemens Spectrum Power 7=2.30
Siemens Spectrum Power 7=2.30
Siemens Spectrum Power 7=2.30-sp2
Siemens Teamcenter
Siemens Vesys<2019.1
Siemens Vesys=2019.1
Siemens Vesys=2019.1
Siemens Vesys=2019.1-sp1912
Siemens Xpedition Enterprise
Siemens Xpedition Package Integrator
Intel Audio Development Kit
CVAT Computer Vision Annotation Tool
Intel Data Center Manager<5.1
Intel Genomics Kernel Library
Intel oneAPI Sample Browser
Intel Secure Device Onboard
Intel Sensor Solution Firmware Development Kit
Intel System Debugger
Intel System Studio
Debian Linux=9.0
Debian Linux=10.0
Debian Linux=11.0
Red Hat Fedora=34
Red Hat Fedora=35
SonicWall Email Security<10.0.12
NetApp Active IQ Unified Manager
NetApp Active IQ Unified Manager for VMware vSphere
NetApp Active IQ Unified Manager
NetApp Cloud Insights Telegraf
Cloud Manager
NetApp Cloud Secure Agent
NetApp OnCommand Insight
NetApp ONTAP Tools for VMware vSphere
NetApp SnapCenter Plug-in for VMware vSphere
Cisco Advanced Malware Protection<3.5.4
cisco automated subsea tuning<2.1.0
Cisco BroadWorks Xtended Services Platform Firmware<2021.11_1.162
Cisco Business Process Automation<3.0.000.115
Cisco Business Process Automation>=3.1.000.000<3.1.000.044
Cisco Business Process Automation>=3.2.000.000<3.2.000.009
Cisco Cloud Connect<12.6\(1\)
Cisco CloudCenter Suite<4.10.0.16
Cisco CloudCenter<5.5.2
Cisco CloudCenter Suite<5.3.1
Cisco CloudCenter<5.5.2
Cisco Common Services Platform Collector<2.9.1.3
Cisco Common Services Platform Collector>=2.10.0<2.10.0.1
Cisco Connected Mobile Experiences
Cisco Unified Contact Center Domain Manager<12.5\(1\)
Cisco Contact Center Management Portal<12.5\(1\)
Cisco Crosswork Data Gateway<2.0.2
Cisco Crosswork Data Gateway=3.0.0
Cisco Crosswork Network Controller<2.0.1
Cisco Crosswork Network Controller=3.0.0
Exinda WAN Optimization Suite<2.0.1
Exinda WAN Optimization Suite=3.0.0
Cisco Crosswork Platform Infrastructure<4.0.1
Cisco Crosswork Platform Infrastructure=4.1.0
Cisco Crosswork Zero Touch Provisioning<2.0.1
Cisco Crosswork Zero Touch Provisioning=3.0.0
Cisco Customer Experience Cloud Agent<1.12.1
Kaa IoT Platform<4.0.3
Cisco Prime Data Center Network Manager (DCNM)<11.3\(1\)
Cisco Prime Data Center Network Manager (DCNM)=11.3\(1\)
Cisco DNA Center Software<2.1.2.8
Cisco DNA Center Software>=2.2.2.0<2.2.2.8
Cisco DNA Center Software>=2.2.3.0<2.2.3.4
Cisco DNA Spaces<2.5
Cisco Emergency Responder<11.5\(4\)
Cisco Enterprise Chat and Email<12.0\(1\)
Cisco Evolved Programmable Network Manager<=4.1.1
Cisco Finesse<12.6\(1\)
Cisco Finesse=12.6\(1\)
Cisco Fog Director
Cisco Identity Services Engine (ISE)<2.4.0
Cisco Identity Services Engine (ISE)=2.4.0
Cisco Integrated Management Controller Supervisor<2.3.2.1
Cisco Intersight Virtual Appliance<1.0.9-361
Cisco IoT Operations Dashboard
Cisco Network Assurance Engine<6.0.2
Cisco Network Services Orchestrator<5.3.5.1
Cisco Network Services Orchestrator>=5.4<5.4.5.2
Cisco Network Services Orchestrator>=5.5<5.5.4.1
Cisco Network Services Orchestrator>=5.6<5.6.3.1
Cisco Nexus Dashboard Software<2.1.2
Cisco Nexus Insights<6.0.2
Cisco Optical Network Controller<1.1.0
Cisco Packaged Contact Center Enterprise<11.6
Cisco Packaged Contact Center Enterprise=11.6\(1\)
Cisco Paging Server<14.4.1
Cisco Prime Service Catalog<12.1
Cisco SD-WAN Solution Software<20.3.4.1
Cisco SD-WAN Solution Software>=20.4<20.4.2.1
Cisco SD-WAN Solution Software>=20.5<20.5.1.1
Cisco SD-WAN Solution Software>=20.6<20.6.2.1
Cisco Smart PHY<3.2.1
Cisco UCS Central Software<2.0\(1p\)
Cisco UCS Director<6.8.2.0
Cisco Unified Communications Manager Session Management Edition<11.5\(1\)
Cisco Unified Communications Manager Session Management Edition<11.5\(1\)
Cisco Unified Communications Manager Session Management Edition=11.5\(1\)
Cisco Unified Communications Manager Session Management Edition=11.5\(1\)
Cisco Unified Communications Manager Session Management Edition=11.5\(1\)
Cisco Unified Communications Manager Session Management Edition=11.5\(1\)su3
Cisco Unified Communications Manager IM and Presence<11.5\(1\)
Cisco Unified Communications Manager IM and Presence=11.5\(1\)
Cisco IP Contact Center Enterprise<11.6\(2\)
Cisco IP Contact Center Enterprise=11.6\(2\)
Cisco Unified Contact Center Express Enhanced<12.5\(1\)
Cisco Unified Customer Voice Portal<11.6
Cisco Unified Customer Voice Portal=11.6
Cisco Unified Customer Voice Portal=12.0
Cisco Unified Customer Voice Portal=12.5
Cisco Unity Connection 8.6<11.5\(1\)
Cisco Video Surveillance Operations Manager<7.14.4
Cisco Virtual Topology System<2.6.7
Cisco Virtualized Infrastructure Manager Software<3.2.0
Cisco Virtualized Infrastructure Manager Software>=3.4.0<3.4.4
Cisco Virtualized Voice Browser<12.5\(1\)
Cisco WAN Automation Engine<7.3.0.2
Cisco Webex Meetings Server<3.0
Cisco Webex Meetings Server=3.0
Cisco Webex Meetings Server=3.0-maintenance_release1
Cisco Webex Meetings Server=3.0-maintenance_release2
Cisco Webex Meetings Server=3.0-maintenance_release3
Cisco Webex Meetings Server=3.0-maintenance_release3
Cisco Webex Meetings Server=3.0-maintenance_release3_security_patch4
Cisco Webex Meetings Server=3.0-maintenance_release3_security_patch5
Cisco Webex Meetings Server=3.0-maintenance_release3_service_pack_2
Cisco Webex Meetings Server=3.0-maintenance_release3_service_pack_3
Cisco Webex Meetings Server=3.0-maintenance_release4
Cisco Webex Meetings Server=4.0
Cisco Webex Meetings Server=4.0-maintenance_release1
Cisco Webex Meetings Server=4.0-maintenance_release2
Cisco Webex Meetings Server=4.0-maintenance_release3
Cisco Workload Optimization Manager<3.2.1
Cisco Unified Intelligence Center<12.6\(1\)
Cisco Unified SIP Proxy<10.2.1v2
Cisco Unified Workforce Optimization<11.5\(1\)
All of
Any of
Cisco Firepower 1010
Cisco Firepower 1120
Cisco Firepower 1140
Cisco Firepower 1150
Cisco Firepower 2110
Cisco Firepower 2120
Cisco Firepower 2130
Cisco Firepower 2140
Cisco Firepower 4110 Next-Generation Firewall
Cisco Firepower 4112 Firmware
Cisco Firepower 4115
Cisco Firepower 4120 Next-Generation Firewall
Cisco Firepower 4125 firmware
Cisco Firepower 4140 Next-Generation Firewall
Cisco Firepower 4145 firmware
Cisco Firepower 4150 Next-Generation Firewall
Cisco Firepower 9300 firmware
Any of
Cisco FX-OS=6.2.3
Cisco FX-OS=6.3.0
Cisco FX-OS=6.4.0
Cisco FX-OS=6.5.0
Cisco FX-OS=6.6.0
Cisco FX-OS=6.7.0
Cisco FX-OS=7.0.0
Cisco FX-OS=7.1.0
cisco automated subsea tuning=02.01.00
Cisco BroadWorks Xtended Services Platform Firmware
Cisco CloudCenter=4.10\(0.15\)
Cisco CloudCenter=5.3\(0\)
Cisco CloudCenter=5.4\(1\)
Cisco CloudCenter=5.5\(0\)
Cisco CloudCenter=5.5\(1\)
Cisco Common Services Platform Collector=002.009\(000.000\)
Cisco Common Services Platform Collector=002.009\(000.001\)
Cisco Common Services Platform Collector=002.009\(000.002\)
Cisco Common Services Platform Collector=002.009\(001.000\)
Cisco Common Services Platform Collector=002.009\(001.001\)
Cisco Common Services Platform Collector=002.009\(001.002\)
Cisco Common Services Platform Collector=002.010\(000.000\)
Cisco Connected Analytics for Network Deployment=006.004.000.003
Cisco Connected Analytics for Network Deployment=006.005.000.
Cisco Connected Analytics for Network Deployment=006.005.000.000
Cisco Connected Analytics for Network Deployment=007.000.001
Cisco Connected Analytics for Network Deployment=007.001.000
Cisco Connected Analytics for Network Deployment=007.002.000
Cisco Connected Analytics for Network Deployment=7.3
Cisco Connected Analytics for Network Deployment=007.003.000
Cisco Connected Analytics for Network Deployment=007.003.001.001
Cisco Connected Analytics for Network Deployment=007.003.003
Cisco Connected Analytics for Network Deployment=008.000.000
Cisco Connected Analytics for Network Deployment=008.000.000.000.004
Cisco Crosswork Network Automation
Cisco Crosswork Network Automation=2.0.0
Cisco Crosswork Network Automation=3.0.0
Cisco Crosswork Network Automation=4.1.0
Cisco Crosswork Network Automation=4.1.1
Cisco Customer Experience Cloud Agent=001.012
CyberVision Kaa IoT Platform=4.0.2
Kaa IoT Platform=4.0.2
Cisco DNA Center Software=2.2.2.8
Cisco DNA Spaces
Cisco DNA Spaces: Connector
Cisco Emergency Responder=11.5
Cisco Emergency Responder=11.5\(4.65000.14\)
Cisco Emergency Responder=11.5\(4.66000.14\)
Cisco Enterprise Chat and Email=12.0\(1\)
Cisco Enterprise Chat and Email=12.5\(1\)
Cisco Enterprise Chat and Email=12.6\(1\)
Cisco Evolved Programmable Network Manager=3.0
Cisco Evolved Programmable Network Manager=3.1
Cisco Evolved Programmable Network Manager=4.0
Cisco Evolved Programmable Network Manager=4.1
Cisco Evolved Programmable Network Manager=5.0
Cisco Evolved Programmable Network Manager=5.1
Cisco Finesse=12.5\(1\)-su1
Cisco Finesse=12.5\(1\)-su2
Cisco Finesse=12.6\(1\)
Cisco Finesse=12.6\(1\)-es01
Cisco Finesse=12.6\(1\)-es02
Cisco Finesse=12.6\(1\)-es03
Cisco Secure Firewall Threat Defense=6.2.3
Cisco Secure Firewall Threat Defense=6.3.0
Cisco Secure Firewall Threat Defense=6.4.0
Cisco Secure Firewall Threat Defense=6.5.0
Cisco Secure Firewall Threat Defense=6.6.0
Cisco Secure Firewall Threat Defense=6.7.0
Cisco Secure Firewall Threat Defense=7.0.0
Cisco Secure Firewall Threat Defense=7.1.0
Cisco Identity Services Engine (ISE)=002.004\(000.914\)
Cisco Identity Services Engine (ISE)=002.006\(000.156\)
Cisco Identity Services Engine (ISE)=002.007\(000.356\)
Cisco Identity Services Engine (ISE)=003.000\(000.458\)
Cisco Identity Services Engine (ISE)=003.001\(000.518\)
Cisco Identity Services Engine (ISE)=003.002\(000.116\)
Cisco Integrated Management Controller Supervisor=002.003\(002.000\)
Cisco Integrated Management Controller Supervisor=2.3.2.0
Cisco Intersight Virtual Appliance=1.0.9-343
Cisco Mobility Services Engine 3310
Cisco Network Assurance Engine=6.0\(2.1912\)
Cisco Nexus Dashboard Fabric Controller=11.0\(1\)
Cisco Nexus Dashboard Fabric Controller=11.1\(1\)
Cisco Nexus Dashboard Fabric Controller=11.2\(1\)
Cisco Nexus Dashboard Fabric Controller=11.3\(1\)
Cisco Nexus Dashboard Fabric Controller=11.4\(1\)
Cisco Nexus Dashboard Fabric Controller=11.5\(1\)
Cisco Nexus Dashboard Fabric Controller=11.5\(2\)
Cisco Nexus Dashboard Fabric Controller=11.5\(3\)
Cisco Network Insights for Data Center=6.0\(2.1914\)
Cisco Network Services Orchestrator
Cisco Optical Network Controller=1.1
Cisco Paging Server=8.3\(1\)
Cisco Paging Server=8.4\(1\)
Cisco Paging Server=8.5\(1\)
Cisco Paging Server=9.0\(1\)
Cisco Paging Server=9.0\(2\)
Cisco Paging Server=9.1\(1\)
Cisco Paging Server=12.5\(2\)
Cisco Paging Server=14.0\(1\)
Cisco Prime Service Catalog=12.1
Cisco SD-WAN Solution Software=20.3
Cisco SD-WAN Solution Software=20.4
Cisco SD-WAN Solution Software=20.5
Cisco SD-WAN Solution Software=20.6
Cisco SD-WAN Solution Software=20.6.1
Cisco SD-WAN Solution Software=20.7
Cisco SD-WAN Solution Software=20.8
Cisco Smart PHY=3.1.2
Cisco Smart PHY=3.1.3
Cisco Smart PHY=3.1.4
Cisco Smart PHY=3.1.5
Cisco Smart PHY=3.2.1
Cisco Smart PHY=21.3
Cisco UCS Central=2.0
Cisco UCS Central=2.0\(1a\)
Cisco UCS Central=2.0\(1b\)
Cisco UCS Central=2.0\(1c\)
Cisco UCS Central=2.0\(1d\)
Cisco UCS Central=2.0\(1e\)
Cisco UCS Central=2.0\(1f\)
Cisco UCS Central=2.0\(1g\)
Cisco UCS Central=2.0\(1h\)
Cisco UCS Central=2.0\(1k\)
Cisco UCS Central=2.0\(1l\)
Cisco Unified Communications Manager Session Management Edition=11.5\(1.17900.52\)
Cisco Unified Communications Manager Session Management Edition=11.5\(1.18119.2\)
Cisco Unified Communications Manager Session Management Edition=11.5\(1.18900.97\)
Cisco Unified Communications Manager Session Management Edition=11.5\(1.21900.40\)
Cisco Unified Communications Manager Session Management Edition=11.5\(1.22900.28\)
Cisco Unified Communications Manager IM & Presence Service=11.5\(1\)
Cisco Unified Communications Manager IM & Presence Service=11.5\(1.22900.6\)
Cisco Unified Computing System software=006.008\(001.000\)
Cisco IP Contact Center Enterprise=12.0\(1\)
Cisco IP Contact Center Enterprise=12.5\(1\)
Cisco IP Contact Center Enterprise=12.6\(1\)
Cisco IP Contact Center Enterprise=12.6\(2\)
Cisco Unified Contact Center Express Enhanced=12.5\(1\)
Cisco Unified Contact Center Express Enhanced=12.5\(1\)-su1
Cisco Unified Contact Center Express Enhanced=12.6\(1\)
Cisco Unified Contact Center Express Enhanced=12.6\(2\)
Cisco Unified Contact Center Domain Manager=12.6\(1\)
Cisco Unified Customer Voice Portal=11.6\(1\)
Cisco Unified Customer Voice Portal=12.0\(1\)
Cisco Unified Customer Voice Portal=12.5\(1\)
Cisco Unified Customer Voice Portal=12.6\(1\)
Cisco Unified Intelligence Center=12.6\(1\)
Cisco Unified Intelligence Center=12.6\(1\)-es01
Cisco Unified Intelligence Center=12.6\(1\)-es02
Cisco Unified Intelligence Center=12.6\(2\)
Cisco Unified SIP Proxy=010.000\(000\)
Cisco Unified SIP Proxy=010.000\(001\)
Cisco Unified SIP Proxy=010.002\(000\)
Cisco Unified SIP Proxy=010.002\(001\)
Cisco Unified Workforce Optimization=11.5\(1\)-sr7
Cisco Unity Connection 8.6=11.5
Cisco Unity Connection 8.6=11.5\(1.10000.6\)
Cisco Video Surveillance Manager=7.14\(1.26\)
Cisco Video Surveillance Manager=7.14\(2.26\)
Cisco Video Surveillance Manager=7.14\(3.025\)
Cisco Video Surveillance Manager=7.14\(4.018\)
Cisco Virtual Topology System=2.6.6
Cisco WAN Automation Engine=7.1.3
Cisco WAN Automation Engine=7.2.1
Cisco WAN Automation Engine=7.2.2
Cisco WAN Automation Engine=7.2.3
Cisco WAN Automation Engine=7.3
Cisco WAN Automation Engine=7.4
Cisco WAN Automation Engine=7.5
Cisco WAN Automation Engine=7.6
Cisco Webex Meetings Server=3.0
Cisco Webex Meetings Server=4.0
Snow Commander<8.10.0
Snow Software VM Access Proxy<3.6
Bentley Synchro 4D>=6.1<6.4.3.2
WP Synchro<6.2.4.2
Rhythmyx<=7.3.2
Apple Xcode<13.3
Siemens SPPA-T3000 SES3000 Firmware
Siemens SPPA-T3000
Cisco FX-OS=6.2.3
Cisco FX-OS=6.3.0
Cisco FX-OS=6.4.0
Cisco FX-OS=6.5.0
Cisco FX-OS=6.6.0
Cisco FX-OS=6.7.0
Cisco FX-OS=7.0.0
Cisco FX-OS=7.1.0
Cisco Firepower 1010
Cisco Firepower 1120
Cisco Firepower 1140
Cisco Firepower 1150
Cisco Firepower 2110
Cisco Firepower 2120
Cisco Firepower 2130
Cisco Firepower 2140
Cisco Firepower 4110 Next-Generation Firewall
Cisco Firepower 4112 Firmware
Cisco Firepower 4115
Cisco Firepower 4120 Next-Generation Firewall
Cisco Firepower 4125 firmware
Cisco Firepower 4140 Next-Generation Firewall
Cisco Firepower 4145 firmware
Cisco Firepower 4150 Next-Generation Firewall
Cisco Firepower 9300 firmware

Remedy

For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

Remedy

https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/

Remedy

https://www.oracle.com/security-alerts/cpuapr2022.html

Remedy

https://www.oracle.com/security-alerts/cpujan2022.html

Remedy

For Log4j versions >=2.10 set the system property log4j2.formatMsgNoLookups or the environment variable LOG4J_FORMAT_MSG_NO_LOOKUPS to true For Log4j versions >=2.7 and <=2.14.1 all PatternLayout patterns can be modified to specify the message converter as %m{nolookups} instead of just %m For Log4j versions >=2.0-beta9 and <=2.10.0 remove the JndiLookup class from the classpath. For example: ``` zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class ``` On OpenShift 4 and in OpenShift Logging, the above mitigation can be applied by following the steps in this article: https://access.redhat.com/solutions/6578421 On OpenShift 3.11, mitigation to the affected Elasticsearch component can be applied by following the steps in this article: https://access.redhat.com/solutions/6578441

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Peer vulnerabilities

(Found alongside the following vulnerabilities)

Frequently Asked Questions

  • What is CVE-2021-44228?

    CVE-2021-44228 is a remote code execution vulnerability in Apache Log4j2.

  • How severe is CVE-2021-44228?

    CVE-2021-44228 is classified as critical with a severity value of 10.

  • Which software is affected by CVE-2021-44228?

    Apache Log4j2 versions prior to 2.16.0 are affected by CVE-2021-44228.

  • How can I fix CVE-2021-44228?

    To fix CVE-2021-44228, upgrade to Apache Log4j2 version 2.16.0 or later.

  • Where can I find more information about CVE-2021-44228?

    You can find more information about CVE-2021-44228 at the following references: [CVE.org](https://www.cve.org/CVERecord?id=CVE-2021-44228), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2021-44228), [GitHub Advisory](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q), [Apache Log4j Security Guide](https://logging.apache.org/log4j/2.x/security.html), [Lunasec Blog](https://www.lunasec.io/docs/blog/log4j-zero-day/), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=2030932), and [Red Hat Advisory](https://access.redhat.com/errata/RHSA-2021:5137).

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203