„ sed -i ‚s/java /java -Dlog4j2.formatMsgNoLookups=true /‘ /opt/vmware/gateway/supervisor/conf/authbroker.ini„ Note the space between „s/java /java“ and a space after „true /“ in the command, these are important to ensure the command works correctly and doesn’t attempt to modify the wrong lines in the configuration file. If the UAG version is between 20 it is also necessary to set the -Dlog4j2.formatMsgNoLookups=true option on the authbroker service with the following commands.Run the script to remove all the occurrences of log4j’s JndiLookup.class.Set executable permission for the above script „ chmod +x uag_rm_log4j_jndilookup.sh„.SSH into UAG console as root user and cd to the directory in which the above script is located.(tested on euc-unified-access-gateway-v3.9.0.0-15751318)ĭownload and copy the script uag_rm_log4j_jndilookup.sh to the UAG VA, you can use WinSCP, and copy file to the /tmp folder.

2021 How to workaround Apache Log4j on UAG: How to mitigate Apache Log4j exploit on VMware UNIFIED ACCESS GATEWAYįor VMware UAG thats is in most cases exposed to internet, its necessary to apply WORKAROUND for CVE-2021-44228 to Unified Access Gateway version 2009 through to 2111.įirtsly we need enable SSH login to the UAG Appliacne, which is by default permited.Ĭonnect from VMware vCenter console to the UAG VA and run “ vi /etc/ssh/sshd_config“ and change the PermitRootLogin no > PermitRootLogin yes and save the file, after you must restart sshd service with command „ service sshd restart “ dont forget DISABLE the SSH connection after your work :))) UPDATED 22.

Euc unified access gateway