CyberRota Analysis
AI-GeneratedThe RemoteSyslogAppender in Apache log4net versions prior to 3.5.0 is vulnerable due to improper encoding, leading to the removal of non-ASCII characters and control characters from log records. This can result in distinct values appearing identical in logs, potentially obscuring critical information and facilitating security evasion. Organizations utilizing the affected versions should prioritize upgrading to 3.5.0 to mitigate the risk of data misrepresentation in their logging systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whose data reaches a log message could make a distinct value look identical in the record, for example a user name holding a zero-width space logged as admin. Only applications that use RemoteSyslogAppender are affected. This issue affects Apache log4net: from 1.2.12 before 3.5.0. Users are recommended to upgrade to version 3.5.0, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)