cloudflare cf cdn为安全漏洞dnslog RCE 0-day (CVE-2021-44228)提供JAVA保护

小樱

cloudflare cf cdn为安全漏洞dnslog RCE 0-day (CVE-2021-44228)提供JAVA保护

Hello there,

As you may know, a zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) was made public on December 9, 2021 that results in remote code execution (RCE).

For all organizations using Log4j, they should update to version 2.15.0 as soon as possible. The latest version can be found at the Log4j download page.

Customers subscribing to our paid PRO and BUSINESS plans and using our WAF are automatically receiving help with mitigating this vulnerability.

As a Cloudflare FREE user, it is important to us that your site is protected from high severity vulnerabilities. For this reason we are actively deploying mitigation rules on your zones to block any malicious exploit attempts. No action is required from you to turn the new rules on.

For more information please see our blog.

The Cloudflare Team

https://logging.apache.org/log4j/2.x/download.html
https://blog.cloudflare.com/cve-2021-44228-log4j-rce-0-day-mitigation/
https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition

不可名

路过