Guest User!

You are not Sophos Staff.

Thread Info
  • Locked Locked
  • Replies 5 replies
  • Subscribers 7 subscribers
  • Views 5359 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

detect CVE-2021-44228 log4j

Daniel Wittich

Would ATP detect requests trying to exploit CVE-2021-44228 log4j? 

The exploit could come via any request cotaining the string "${jndi" 



This thread was automatically locked due to age.
Parents

  • Astaro IPS Rules

    I would keep the list URL around so you can check back regularly.

    Some of you guys I think sit on CVE and refresh that site just to grab a new CVE to post it, lol.  This was like... less than five days ago published.

    XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SSD HDD | GB Ethernet x5

Reply

  • Astaro IPS Rules

    I would keep the list URL around so you can check back regularly.

    Some of you guys I think sit on CVE and refresh that site just to grab a new CVE to post it, lol.  This was like... less than five days ago published.

    XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SSD HDD | GB Ethernet x5

Children
Unfiltered HTML