"
},
"cve_list": [
"CVE-2019-14835"
],
"cvss": {
"base_obj": {
"#text": "10.0",
"source": "service"
},
"temporal": "8.5",
"vector_string": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:U/RC:C"
},
"cvss_v3": {
"base": "10.0",
"temporal": "9.1",
"vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:U/RC:C",
"version": "3.1"
},
"diagnosis": {
"value": "On August 5, 2015, the Apache Logging Services Project Management Committee (PMC) has announced that the Log4j 1.x logging framework has reached its end of life (EOL) and is no longer officially supported.
\n\n
QID Detection: (Authenticated) - Linux
\n This QID uses the OS package manager, locate command and ls proc command to check vulnerable versions of log4j
\n\n
QID Detection: (Authenticated) - MacOS
\n This QID uses the locate command and mdfind command to check vulnerable versions of log4j
\n\n QID Detection: (Authenticated) - Windows
\n On Windows system, the QID identifies vulnerable instance of log4j via WMI query to check log4j included in the running processes via command-line.\n
"
},
"discovery": {
"auth_type_list": {
"value": [
"Unix",
"Windows"
]
},
"remote": 0
},
"last": {
"service_modification_datetime": "2024-07-29T12:47:11.000Z"
},
"patchable": false,
"pci_flag": true,
"published_datetime": "2022-01-12T13:25:56.000Z",
"qid": "102",
"severity_level": "Urgent",
"software_list": [
{
"product": "log4j",
"vendor": "apache"
}
],
"solution": {
"value": "Customers are advised to upgrade to Apache Log4j 2.X, for more information please refer to Apache Blog.
"
},
"status": "found",
"threat_intelligence": {
"intel": [
{
"id": "4",
"text": "High_Lateral_Movement"
},
{
"id": "5",
"text": "Easy_Exploit"
},
{
"id": "6",
"text": "High_Data_Loss"
},
{
"id": "7",
"text": "Denial_of_Service"
},
{
"id": "8",
"text": "No_Patch"
},
{
"id": "13",
"text": "Privilege_Escalation"
},
{
"id": "15",
"text": "Remote_Code_Execution"
}
]
},
"title": "EOL/Obsolete Software: Apache Log4j 1.X Detected",
"vendor_reference_list": [
{
"id": "Apache Log4j Security Advisory",
"url": "https://blogs.apache.org/foundation/entry/apache_logging_services_project_announces"
}
],
"vuln_type": "Vulnerability"
},
"last_pc_scanned_date": "2023-06-28T09:58:12.000Z",
"last_scan_datetime": "2023-07-03T06:25:17.000Z",
"last_vm_scanned_date": "2023-07-03T06:23:47.000Z",
"last_vm_scanned_duration": 1113,
"netbios": "NOSCORE",
"os": "Windows 2016/2019/10",
"tracking_method": "IP",
"vulnerability": {
"affect_running_kernel": "0",
"first_found_datetime": "2021-02-05T04:50:45.000Z",
"is_disabled": false,
"is_ignored": false,
"last_found_datetime": "2024-03-08T20:15:41.000Z",
"last_processed_datetime": "2024-03-08T20:15:41.000Z",
"last_test_datetime": "2024-03-08T20:15:41.000Z",
"last_update_datetime": "2024-03-08T20:15:41.000Z",
"qid": 102,
"severity": 5,
"ssl": "0",
"status": "Active",
"times_found": 5393,
"type": "Confirmed",
"unique_vuln_id": "99999991"
}
}
},
"related": {
"hosts": [
"noscore",
"noscore.adfs.local",
"9",
"NOSCORE"
],
"ip": [
"10.50.2.119"
]
},
"resource": {
"id": "9",
"name": "noscore.adfs.local"
},
"tags": [
"preserve_original_event",
"preserve_duplicate_custom_fields",
"forwarded",
"qualys_vmdr-asset_host_detection",
"provider_cloud_data"
],
"vulnerability": {
"category": [
"Security Policy"
],
"classification": "CVSS",
"description": "On August 5, 2015, the Apache Logging Services Project Management Committee (PMC) has announced that the Log4j 1.x logging framework has reached its end of life (EOL) and is no longer officially supported.
\n\n
QID Detection: (Authenticated) - Linux
\n This QID uses the OS package manager, locate command and ls proc command to check vulnerable versions of log4j
\n\n
QID Detection: (Authenticated) - MacOS
\n This QID uses the locate command and mdfind command to check vulnerable versions of log4j
\n\n QID Detection: (Authenticated) - Windows
\n On Windows system, the QID identifies vulnerable instance of log4j via WMI query to check log4j included in the running processes via command-line.\n
", "enumeration": "CVE", "id": [ "CVE-2019-14835" ], "reference": [ "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14835" ], "scanner": { "vendor": "Qualys" }, "score": { "base": 10, "version": "3.1" }, "severity": "Critical", "title": "EOL/Obsolete Software: Apache Log4j 1.X Detected" } } ```