News for hackers. Stuff that matters.

A comment on Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet reference guide. Parent comment

Re:Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sh... by detaro on Monday December 13, 2021 @03:16PM (#29544051)
As I understand it that prevents the RCE, but not other variants like leaking environment variables.
[ Parent | on HN ]
Re:Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sh... by throwaway_JiY4E on Monday December 13, 2021 @03:28PM (#29544196)
> other variants like leaking environment variables.

I'll google/search more about these. I assume if we say RCE is a 10 for risk, then maybe others are 5 or 3?

[ Parent | on HN ]
Re:Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sh... by detaro on Monday December 13, 2021 @10:40PM (#29547943)
CORRECTION: apparently latest Java is also vulnerable: https://twitter.com/_MG_/status/1470452714203086851
[ Parent | on HN ]