CVE-2021-44228 - Log4j RCE 0-day mitigation
Dec 10, 2021Gabriel Gabor, Andre Bluehs
Summary
Deployed three new WAF rules (IDs 100514/6b1cc72dff97464695a474430f12, 100515/0c054d4e4dd5455c9ff8f01efe5abb10, 100516/5f6744fa026a4638bda5b3d7d5e015dd) to mitigate the Log4j RCE vulnerability (CVE-2021-44228). These rules inspect HTTP headers, body, and URL for exploit patterns and are configured with a default BLOCK action. The update indicates that these rules have been further hardened with a default action of BLOCK.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack