CVE-2021-4125CWE-20

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all…

published August 24, 2022

CVSS
—
EPSS
2%
Percentile
74.4
In the wild
Unconfirmed
What it is

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed. This CVE only applies to the OpenShift Metering hive container images, shipped in OpenShift 4.8, 4.7 and 4.6.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01523 · 74.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-08-24T15:09Z
EPSS history
Timeline
  • 24 AUG 15:09Z
    It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all…
    cvelistv5