TZA CUSTOMER ALERT 12/17/2021 – RESPONSE TO LOG4SHELL (CVE-2021-44228)

INDUSTRY VUNERABILITY ALERT – Publicly released on 9 December 2021, and known as Log4j or Log4Shell, is actively being targeted in the wild. CVE-2021-44228 has been assigned the highest “Critical” severity rating with a maximum risk score of 10. On Tuesday, December 14th, new guidance was issued and a new CVE-2021-45046 (CVSS 3.7) was released stating that…