F5 Rules for AWS WAF - Web exploits OWASP Rules - Need Log4J update CVE-2021-44228

Hi,

Yes I am from support team handling 'F5 Rules for AWS WAF' as well.

As I mentioned earlier 'F5 Rules for AWS WAF' is updated to deal with Log4J, CVE-2021-44228.

Thanks

Mohamedfaizur

Hi,

Are you a member of F5 product team? I just want to ensure about the source of information you gave to me. As the Log4j vulnerability has impacted us organization level. If the "F5 Rules for AWS WAF - Web exploits OWASP Rules" product is updated or not impacted by log4j vulnerability, we would not require any action or update at our infra level.

Hi,

Unlike traditional, full blown WAF security solutions, the content of F5 rules is not visible and cannot be viewed.

I have checked F5 rule set and its updated to deal with CVE-2021-44228

Thanks

Hi,

Yes 'F5 Rules for AWS WAF' is updated to deal with Log4J, CVE-2021-44228

Thanks