What are the log4j vulnerabilities, and how did it function?

This post will explain and walk through the exploitation of the recently discovered vulnerability, CVE-2021–44228, that affects the Java logging program Log4J. This vulnerability, which provides remote code execution on hosts using software that makes use of the log4j program, has a severity level of 10.0, making it classified as most critical. Another name for this exploit is “Log4Shell.”

Table of Content

1. Log4jShell
2. What is log4j
3. What is LDAP and JNDI
4. LDAP and JNDI …

cybersecurity hacking log4j