DevCentral Connects: Log4j CVE-2021-44228

Buu and John held court today in a special Monday episode of DevCentral Connects with F5 security experts MegaZone, David Warburton, and Joe Martin to discuss the log4j vulnerability.

Resources

AskF5 Solution on the Vulnerability (K19026212)
F5 Labs: Explaining the Widespread log4j vulnerability
Beyond patching and mitigations, maybe some architecture changes? (LinkedIn Thread)
Talking to Leadership (Slide Deck from InfoSec Innovations)

Published Dec 13, 2021

Version 1.0

ASM Advanced WAF

NGINX App Protect

Was this article helpful?

1 Comment

PeteWhite
Employee
Dec 18, 2021
I have created an iApp to allow you to deploy and manage the iRule. Check it out at https://devcentral.f5.com/s/articles/Apache-Log4j2-CVE-2021-44228-mitigation-iApp