'Vaccine' against Log4Shell vulnerability has potential -- and limitations
A December 2021 VentureBeat article covers Cybereason's "vaccine" workaround for the Log4Shell flaw in Apache Log4j servers. Casey Ellis, founder and CTO of Bugcrowd, tells VentureBeat the fix appears effective, though he calls it a supplementary tool rather than a cure-all and notes it does not work before Log4j 2.10.
Source description, as published
Security firm Cybereason has released a "vaccine" to supplement patching of the Log4Shell vulnerability, which affects Apache Log4j servers.