For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

CarloMun's avatar
CarloMun
Icon for Nimbostratus rankNimbostratus
Dec 19, 2021

Log4j iRule mitigation as described in K59329043 - which encoding is the regex using ?

Hi Community,   just for my understanding - can someone please clarify which encoding is being used in the regex with F5 release under K59329043 in order to mitigate log4j CVEs exploits ?   I...
announcement
iRules
LTM
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Dec 19, 2021

Hi ,

 

the regex will search for some possible variants and obfuscations of the well-known string that is used to exploit the log4shell vulnerability.

Paste the full string without the {} here: https://regex101.com/.

You will get an awesome explanation with syntax highlighting.

 

KR

Daniel

  • L__G_'s avatar
    L__G_
    Icon for Altostratus rankAltostratus
    Jan 11, 2022

    Hello

     

    Another great site for regex visualisation : regexper.com

     

    Copy paste the F5 regex without the {} and (?i).