Red Hat Update
1791Warning Date
Severity Level
Warning Number
Target Sector
23 December, 2021
● Medium
2021-4131
All
Description:
Red Hat has released security updates to address a vulnerability in the following products:
- rh-maven36-log4j12
- Red Hat Software Collections (for RHEL Server) 1 for RHEL 7 x86_64
- Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7 s390x
- Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7 ppc64le
- Red Hat Software Collections (for RHEL Workstation) 1 for RHEL 7 x86_64
Threats:
An attacker could exploit this vulnerability by doing the following:
- Remote code execution
Best practice and Recommendations:
The CERT team encourages users to review Red Hat security advisory and apply the necessary updates: