DevCentral Connects: Log4j CVE-2021-44228

[JRahm]

Buu and John held court today in a special Monday episode of DevCentral Connects with F5 security experts MegaZone, David Warburton, and Joe Martin to discuss the log4j vulnerability.

Resources

• AskF5 Solution on the Vulnerability (K19026212)
• F5 Labs: Explaining the Widespread log4j vulnerability
• Beyond patching and mitigations, maybe some architecture changes? (LinkedIn Thread)
• Talking to Leadership (Slide Deck from InfoSec Innovations)

[PeteWhite]

I have created an iApp to allow you to deploy and manage the iRule. Check it out at https://devcentral.f5.com/s/articles/Apache-Log4j2-CVE-2021-44228-mitigation-iApp