Log4sh

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Log4sh records in CISA KEV

No Log4sh vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Log4sh 1 record LOW

Records

1 record

TI-2005-01815 CVE-2005-1915 · GHSA-jqgx-xp62-x36q

The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to…

LOW 11

The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00348 Published 2005-09-02 No fix listed

Open these records in search →

Critical	0
High	0
Medium	0
Low	1
No CVSS	0