Guest User!

You are not Sophos Staff.

Thread Info
  • Locked Locked
  • Replies 5 replies
  • Subscribers 7 subscribers
  • Views 5355 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

detect CVE-2021-44228 log4j

Daniel Wittich

Would ATP detect requests trying to exploit CVE-2021-44228 log4j? 

The exploit could come via any request cotaining the string "${jndi" 



This thread was automatically locked due to age.
Parents

  • Hi,

    it would be good idea to block the JNDI call in the "EMail Protection" too. Just tested it with our mail server, e.g. as subject, it's logged to the syslog server (and probably to whatever else in between or at the other end).

    Best regards

    Henri 

Reply

  • Hi,

    it would be good idea to block the JNDI call in the "EMail Protection" too. Just tested it with our mail server, e.g. as subject, it's logged to the syslog server (and probably to whatever else in between or at the other end).

    Best regards

    Henri 

Children
No Data
Unfiltered HTML