Log4j research, guidance, and solution overview

[Claudia.Landivar]

How do I keep up with current Log4j research, guidance and solutions? 

Since December 9, 2021, detection of a critical vulnerabilities (to date, CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105) in the Apache Log4j Java logging library have occupied the entire industry’s attention. 

As we all continue to gain a deeper understanding of the impact of these threats, please refer to the following content areas for updates that will help you detect and mitigate attacks. 

Where do I go for centralized Log4j information from AppDynamics?

Our AppDynamics’ response to our customers regarding the Log4j vulnerability threat Blog post includes a review of our findings, as well as a directory of customer resources. Check it out and refer back to it as research and remediation guidance evolve.

Resource highlights

• ^RevisedAdvisory pages AppD Log4j Security Advisory (CVE-2021-44228 and CVE-2021-45046) and Security Advisory: CVE-2021-45105 in Apache Log4j continue to offer the latest research findings and info updates. 
  
  
• Here in the Community Knowledge Base, see our detailed walkthrough of how to use AppDynamics with Cisco Secure Application to find Log4j vulnerabi.... The post also includes instructions on how to determine whether you’ve suffered a Log4j exploit.
  
  ^New! Prefer a video walk-through?
  Check out our Defend Log4j Vulnerabilities with Cisco Secure Application on YouTube.
  
  
• In case you missed it, Cisco DevNet posted Logj4 Developer Response.
  

[Claudia.Landivar]

FYI, there's a small informational revision to our Knowledge Base article, How do I use AppDynamics with Cisco Secure Application? — a (brief) new section describing how Cisco Secure Application is distinguished among other solutions.

(We also update the article with the vulnerabilities released after the article's publication—but well-noted in other advisories and posts—for completeness.)