CVE-2022-0070: amazon web services log4j-cve-2021-44228-hotpatch Execution with Unnecessary Privileges
Vulnerability summary
CVE-2022-0070 is a high (CVSS 8.8) Execution with Unnecessary Privileges vulnerability in amazon web services log4j-cve-2021-44228-hotpatch. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 30.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 19-04-2022PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST8.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
0.38%
Chance of exploitation in the next 30 days
Percentile
30%
Versus all other CVEs
30-day change
0.00 pp
From 0.38% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (unit42.paloaltonetworks.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-250Execution with Unnecessary PrivilegesThe product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
- CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Affected systems
Amazon1 product
- log4jhotpatch< 1.1-16
Amazon web services1 product
- log4j-cve-2021-44228-hotpatch≥ unspecified, < 1.1-16
2 vendors · 2 products
References
2 links- unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilitiesX Refsource MISCExploitThird Party Advisory