Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

{
  "id": "CVE-2021-44228",
  "title": "Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints",
  "type": "Vulnerability",
  "source_url": "https://www.cve.org/CVERecord?id=CVE-2021-44228",
  "snapshot": "CVE-2021-44228.json",
  "status": "PUBLISHED",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "cve_schema": "5.1",
  "published": "2021-12-10T00:00:00.000Z",
  "modified": "2025-10-21T23:25:23.121Z",
  "provider": {
    "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "shortName": "apache",
    "dateUpdated": "2023-04-03T00:00:00.000Z"
  },
  "affected": [
    {
      "vendor": "Apache Software Foundation",
      "product": "Apache Log4j2",
      "versions": [
        {
          "version": "2.0-beta9",
          "status": "affected",
          "lessThan": "log4j-core*",
          "versionType": "custom",
          "changes": [
            {
              "at": "2.3.1",
              "status": "unaffected"
            },
            {
              "at": "2.4",
              "status": "affected"
            },
            {
              "at": "2.12.2",
              "status": "unaffected"
            },
            {
              "at": "2.13.0",
              "status": "affected"
            },
            {
              "at": "2.15.0",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "credits": [
    {
      "lang": "en",
      "value": "This issue was discovered by Chen Zhaojun of Alibaba Cloud Security Team."
    }
  ],
  "source_references": [
    {
      "url": "https://logging.apache.org/log4j/2.x/security.html"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2021/12/10/1",
      "tags": [
        "mailing-list"
      ]
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2021/12/10/2",
      "tags": [
        "mailing-list"
      ]
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd",
      "tags": [
        "vendor-advisory"
      ]
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2021/12/10/3",
      "tags": [
        "mailing-list"
      ]
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20211210-0007/"
    },
    {
      "url": "http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html"
    },
    {
      "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032"
    },
    {
      "url": "https://www.oracle.com/security-alerts/alert-cve-2021-44228.html"
    },
    {
      "url": "https://www.debian.org/security/2021/dsa-5020",
      "tags": [
        "vendor-advisory"
      ]
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html",
      "tags": [
        "mailing-list"
      ]
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/",
      "tags": [
        "vendor-advisory"
      ]
    },
    {
      "url": "https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/",
      "tags": [
        "vendor-advisory"
      ]
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2021/12/13/2",
      "tags": [
        "mailing-list"
      ]
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2021/12/13/1",
      "tags": [
        "mailing-list"
      ]
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2021/12/14/4",
      "tags": [
        "mailing-list"
      ]
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd",
      "tags": [
        "vendor-advisory"
      ]
    },
    {
      "url": "https://www.kb.cert.org/vuls/id/930724",
      "tags": [
        "third-party-advisory"
      ]
    },
    {
      "url": "https://twitter.com/kurtseifried/status/1469345530182455296"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf"
    },
    {
      "url": "http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html"
    },
    {
      "url": "http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html"
    },
    {
      "url": "http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html"
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd",
      "tags": [
        "vendor-advisory"
      ]
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2021/12/15/3",
      "tags": [
        "mailing-list"
      ]
    },
    {
      "url": "http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html"
    },
    {
      "url": "http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html"
    },
    {
      "url": "http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html"
    },
    {
      "url": "http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html"
    },
    {
      "url": "http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/",
      "tags": [
        "vendor-advisory"
      ]
    },
    {
      "url": "http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf"
    },
    {
      "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
    },
    {
      "url": "http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html"
    },
    {
      "url": "https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md"
    },
    {
      "url": "http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html"
    },
    {
      "url": "http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2022/Mar/23",
      "tags": [
        "mailing-list"
      ]
    },
    {
      "url": "https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001"
    },
    {
      "url": "https://github.com/cisagov/log4j-affected-db"
    },
    {
      "url": "https://support.apple.com/kb/HT213189"
    },
    {
      "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
    },
    {
      "url": "https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228"
    },
    {
      "url": "https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2022/Jul/11",
      "tags": [
        "mailing-list"
      ]
    },
    {
      "url": "http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html"
    },
    {
      "url": "http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2022/Dec/2",
      "tags": [
        "mailing-list"
      ]
    },
    {
      "url": "http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html"
    }
  ]
}