AWS WAF - Web Exploits Rules by F5 - Log4J Update

[TonyH-UK]

Hi F5

Does the ruleset "AWS WAF - Web Exploits Rules by F5" now offer any protection from requests seeking to exploit the Log4J vulnerability described in CVE-2021-44228

If not currently - can you advise when we may expect an update?

Thank you

[Mohamedfaizur]

Hi,

Yes 'F5 Rules for AWS WAF' is updated to deal with Log4J, CVE-2021-44228

Thanks

[AndyShortt]

Hello,

Same question, but for CVE-2021-40438?

Thanks,

Andy