CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade si-units-javadocUpgrade uom-systems-javadocUpgrade uom-libUpgrade uom-seUpgrade pcp-parfait-agentUpgrade uom-lib-javadocUpgrade unit-apiUpgrade parfait-javadocUpgrade parfaitUpgrade uom-se-javadocUpgrade uom-parentUpgrade uom-systemsUpgrade parfait-examplesUpgrade si-unitsUpgrade unit-api-javadoc | May 4, 2022 | Jan 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade log4j-javadocUpgrade log4jUpgrade log4j-manual | Jul 4, 2022 | Jan 18, 2022 |
| Amazon_linux | — | Upgrade log4j | Apr 6, 2023 | Jan 18, 2022 |
| Centos_linux | — | Upgrade unit-apiUpgrade log4jUpgrade uom-systemsUpgrade unit-api-javadocUpgrade log4j-debuginfoUpgrade uom-libUpgrade uom-parentUpgrade pcp-parfait-agentUpgrade log4j-javadocUpgrade uom-se-javadocUpgrade uom-systems-javadocUpgrade si-unitsUpgrade log4j-manualUpgrade uom-seUpgrade parfaitUpgrade uom-lib-javadocUpgrade parfait-javadocUpgrade parfait-examplesUpgrade si-units-javadoc | Feb 17, 2022 | Jan 18, 2022 |
| Debian | — | Upgrade apache-log4j1.2 | Feb 2, 2022 | Jan 18, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade log4j | May 25, 2022 | Jan 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade log4j | Mar 22, 2022 | Jan 18, 2022 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Aug 26, 2022 | Jan 18, 2022 |
| Oracle_linux | — | Upgrade parfaitUpgrade log4j-javadocUpgrade si-units-javadocUpgrade pcp-parfait-agentUpgrade si-unitsUpgrade log4jUpgrade log4j-manualUpgrade parfait-examplesUpgrade uom-systemsUpgrade uom-se-javadocUpgrade uom-libUpgrade parfait-javadocUpgrade uom-lib-javadocUpgrade uom-systems-javadocUpgrade unit-apiUpgrade unit-api-javadocUpgrade uom-seUpgrade uom-parent | Jan 28, 2022 | Jan 18, 2022 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jan 18, 2022 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 18, 2022 |
| Redhat_linux | — | Upgrade pcp-parfait-agentUpgrade unit-api-javadocUpgrade si-unitsUpgrade uom-se-javadocUpgrade uom-parentUpgrade uom-systemsUpgrade parfaitUpgrade log4j-javadocUpgrade parfait-examplesUpgrade log4j-debuginfoUpgrade log4jUpgrade uom-lib-javadocUpgrade si-units-javadocUpgrade uom-libUpgrade parfait-javadocUpgrade unit-apiUpgrade log4j-manualUpgrade uom-systems-javadocUpgrade uom-se | Jan 27, 2022 | Jan 18, 2022 |
| Rocky_linux | — | — | Aug 15, 2024 | Jan 18, 2022 |
| Suse | — | Upgrade kafka-kitUpgrade log4j-manualUpgrade log4j12Upgrade log4j12-javadocUpgrade log4j12-manualUpgrade kafka-sourceUpgrade log4j | Jan 27, 2022 | Jan 18, 2022 |
| Ubuntu | — | Upgrade liblog4j1.2-java (Ubuntu Pro)Upgrade liblog4j1.2-java | Apr 10, 2023 | Jan 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub