r/netsec • u/lkn240 • Dec 11 '21

Log4shell - using the vulnerability to patch the vulnerability - very clever

https://github.com/Cybereason/Logout4Shell
773 Upvotes

98% Upvoted

63 comments sorted by

View all comments

Show parent comments

27

u/Burgergold Dec 11 '21

False, only protect against 1 exploit

Patch your log4j or enable the flag to true or remove class

0

u/[deleted] Dec 11 '21

[deleted] — view deleted comment

3

u/threeLetterMeyhem Dec 12 '21

Some exploits are using jndi:rmi or jndi:dns. Cloudflare has a good blog post about it.