Bug Bounty

All about electronic devices security
https://mail.bugbounty.com.au/

JNDI Code Injection due an outdated log4j component

https://mail.bugbounty.com.au/viewtopic.php?t=97

Page 1 of 1

JNDI Code Injection due an outdated log4j component

Posted: Sun Oct 06, 2024 4:50 am
by Shane1145
It seems that the machine is affected by the latest CVE-2021-44228 which grants any authenticated user command execution. The vulnerability affects the remote asset forum.acronis.com and this issue allows to remote attackers to perfom Remote Code Execution via JNDI exfiltration.
Steps To Reproduce

https://hackerone.com/reports/1430622
All times are UTC
Page 1 of 1

Powered by phpBB® Forum Software © phpBB Limited