Home→Vulnerabilities→CVE-2021-45046
Critical Risk Active Exploitation

CVE-2021-45046

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.

Share this vulnerability:
⚠️

Confirmed Active Exploitation

This vulnerability is listed in the CISA KEV Catalog. Federal agencies are mandated to patch immediately. Immediate remediation is required.

Exploitation Probability (EPSS)

Critical Priority
94.34%

The Exploit Prediction Scoring System (EPSS) uses machine learning to estimate the probability that a vulnerability will be exploited in the wild within the next 30 days.

0% (Theoretical)100% (Certainty)

7-Day Exploitation Trend

Vulnerability Timeline

2 events
Dec 14, 2021
Vulnerability Disclosed
Published to component-level vulnerability database.
Oct 27, 2025
Last Updated
Record updated with new analysis or tags.

Threat Actor Attribution

PREMIUM INTEL
Associated Groups:Lazarus Group, APT28
Ransomware Campaigns:LockBit 3.0, BlackCat
IoCs (Indicators):14 IPs, 3 Hashes

Remediation & Mitigation

SOLUTION

Official patches and mitigation steps are available for this vulnerability.

# Update Command
apt-get update && apt-get upgrade -y specific-package
# Verify installation
dpkg -l | grep package-name

Affected Products

83 Total
apache/log4jAll Versions
apache/log4j2.0
cvat/computer_vision_annotation_tool-
intel/audio_development_kit-
intel/datacenter_manager-

References

http://www.openwall.com/lists/oss-security/2021/12/14/4Openwall
Mailing ListMitigationThird Party Advisory
http://www.openwall.com/lists/oss-security/2021/12/15/3Openwall
Mailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2021/12/18/1Openwall
Mailing ListThird Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdfSiemens
Third Party Advisory

Am I Vulnerable?

Check your domain or package.json for CVE-2021-45046 exposure.

Share This Page

Help others discover this vulnerability information

Vulnerability Details

CVSS Base Score
9/ 10
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Published Date
Dec 14, 2021
Last Modified
Oct 27, 2025
Need API Access?

Integrate this data into your SOAR platform.

View Plans →
Need Manual Validation?

Automated scanners flag false positives. Get a manual pentest validation for this CVE.