Forum Discussion
Additional Plugins Released for Log4Shell - Apache Log4j...
Additional Plugins Released for Log4Shell - Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228) Tenable has released two additional plugins for CVE-2021-44228, known as Log4Shell. Addi...
Hi Tenable Community - sanity-check on the Nessus updates to scan for this. For some servers I do not have auth (don't ask) - will the Log4Shell scan work to completion or provide partial results?
To expand on my ask - which will report good results w/o auth:
Host
Apache Log4j < 2.15.0 Remote Code Execution155999
Apache Log4j < 2.15.0 Remote Code Execution156002
Apache Log4j Installed (Linux / Unix)156000
Apache Log4j JAR Detection (Windows)156001
Web Services
Apache Log4j Message Lookup Substitution RCE (Log4Shell) (Direct Check)155998
Apache Log4Shell RCE detection via callback correlation (Direct Check HTTP)156014
