Skip to content

Glossary: Physical and Wireless Vectors, and Vulnerabilities

Log4Shell

Also written: Log4j, CVE-2021-44228

A December 2021 zero-day in Log4j, a Java logging library: one line of text written to a log could make a server run an attacker's code. It also showed that many companies didn't know where Log4j was used.

Where the book teaches it

Related terms

Zero-dayWAF (web application firewall)n-day