USN-4495-1: Apache Log4j vulnerability
15 September 2020
Apache Log4j could be made to remotely execute arbitrary code if it received specially crafted log data.
- apache-log4j1.2 - Java-based open-source logging tool
It was discovered that Apache Log4j does not properly deserialize
untrusted data. An attacker could possibly use this issue to remotely
execute arbitrary code. (CVE-2019-17571)