Analysis of Log4Shell vulnerability & CVE-2021-45046

Elastic Security details its detection and response to the Log4Shell vulnerability (CVE-2021-44228) and the related CVE-2021-45046, reporting active exploitation and widespread adoption by threat actors. The advisory documents observed deployments of multiple malware families (including crypto-miners), expanded detections and hunting queries, notes CVE-2021-45046 was re-scored to CVSS 9.0 with proof-of-concept activity, and recommends upgrading Log4j or removing the JndiLookup class while providing resources and guidance to users.