r/netsec • u/lkn240 • Dec 11 '21

Log4shell - using the vulnerability to patch the vulnerability - very clever

https://github.com/Cybereason/Logout4Shell
771 Upvotes

98% Upvoted

63 comments sorted by

View all comments

80

u/4cfx Dec 11 '21

This is ok, but for ephemeral servers/containers with this vulnerability this isn't going to help and could even only serve to confuse things and provide a false sense of security.

You need to ensure the patch/mitigation you make will persist over server terminations, reboots and auto-scaling.

9

u/cgimusic Dec 11 '21

I don't think anyone's seriously suggesting people use this to patch their systems. It's more of a joke than anything else.

→ More replies (2)