Was there not a flaw in the jndi api for ldap? log4j was just the entry point from what I understood.
The flaw was in log4j's use of the library which allowed remotely connecting and executing code by default based on connection strings which were possibly user-entered.