AWS's Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation
Unit 42 researchers found that AWS's Log4Shell hot patch solutions invoked container binaries such as "java" without proper containerization, spawning them with all Linux capabilities, without seccomp or cgroups, and as root regardless of the container's...