How to Make Log4Shell Remediation Quick & Effective | Qualys

Summary: Qualys published guidance and an open source utility for remediating Log4Shell (CVE-2021-44228) by removing the JndiLookup class from vulnerable Log4j libraries, an approach it says is becoming a popular immediate remediation option. The utility relies on findings from Qualys' Log4jScanner, which must run on each asset first, and Patch Management customers can deploy it through a job that runs a PowerShell script to execute the tool and report results to the Qualys platform.
Why it matters: Qualys notes that most Java-based applications use Log4j and that the ease of exploitation makes remediation a race against time, so the exposure spans nearly every Java application in the environment. The utility can fail if a running Java process prevents removal of the JndiLookup class, which means the script must stop the application first.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-44228
Related: CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Dec 10, 2021
Log4Shell Everywhere Cyber Risks ·
Log4Shell Scanner Cyber Risks ·