---
id: 7372
title: "CVE-2021-44228 | Lỗ hổng NGHIÊM TRỌNG trên thư viện Apache Log4j và các vấn đề liên quan"
cve: CVE-2021-44228
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/cve-2021-44228-lo-hong-nghiem-trong-tren-thu-vien-apache-log4j-va-cac-van-de-lien-quan/"
published_at: "2022-01-05T07:18:13Z"
tags: ["rce", "java", "log4j", "log4shell", "cve-2021-44228", "jndi-injection"]
phying_url: "https://phying.com/item/7372"
lang: en
---

# CVE-2021-44228 | Lỗ hổng NGHIÊM TRỌNG trên thư viện Apache Log4j và các vấn đề liên quan

## Summary

An overview of Log4Shell (CVE-2021-44228): unauthenticated JNDI injection RCE in Log4j 2.0-beta9 through 2.14.1, rated CVSS 10, noting JNDI injection research dates back to Black Hat 2016.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2021-44228
- **Published:** 2022-01-05T07:18:13Z
- **Original:** https://blog.viettelcybersecurity.com/cve-2021-44228-lo-hong-nghiem-trong-tren-thu-vien-apache-log4j-va-cac-van-de-lien-quan/
- **Phying News:** https://phying.com/item/7372