CVE-2021-44228 aka Log4Shell Vulnerability Explained

Log4Shell (CVE-2021-44228) is a critical (CVSS 10) remote-code-execution vulnerability in the Log4j Java logging framework that was rapidly exploited in the wild; the report details exploitation vectors (e.g., specially formatted log strings, user-agent/SSID vectors), rapid development of scanning and exploitation tools, vendor advisories and mitigation steps (WAF tuning, patches, egress controls), and how Aqua’s platform detects, blocks and prevents post-exploitation activity in affected workloads.