log4j-cve-2021-44228-hotpatch vulnerabilities
1 known vulnerability in log4j-cve-2021-44228-hotpatch from Amazon. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest first
- 7.8 High severity
log4j-cve-2021-44228-hotpatch: Improper Neutralization of Special Elements used in an OS Command
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters.