Forum Discussion

danielm1's avatar
danielm1
Icon for Cirrus rankCirrus
Dec 11, 2021

CVE-2021-44228 irule mitigation?

Hello there, Is there any iRule mitigation for the CVE-2021-44228? In support askf5 there is a mitigation using ASM but if I don't have it yet. Could I use an iRule?   Regards, Daniel
ASM Advanced WAF
LTM
security
John_Alam's avatar
John_Alam
Icon for Employee rankEmployee
Dec 11, 2021

You may want to consider scanning the entire HTTP request as one variable. [HTTP::request],

You may also want to normalize it using [URI::decode [HTTP::request]] , or [URI::decode [HTTP::payload]] , this way, attacks including "jndi%3Aldap" do not succeed.

 

HTH