# Apache Log4J Vulnerability - CVE-2021-44228

**URL:** <https://forum.inductiveautomation.com/t/apache-log4j-vulnerability-cve-2021-44228/54050>\
**Category:** Ignition\
**Tags:** ignition79, ignition80, ignition81\
**Created:** [December 13, 2021, 2:50pm UTC](https://forum.inductiveautomation.com/t/apache-log4j-vulnerability-cve-2021-44228/54050 "2021-12-13T14:50:51Z")\
**Posts on this page:** 1\
**Showing post:** 12

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [December 15, 2021, 9:28pm UTC](https://forum.inductiveautomation.com/t/apache-log4j-vulnerability-cve-2021-44228/54050/12 "2021-12-15T21:28:54Z")

</div>

False positive.

> [@Log4J on Linux & Windows](https://forum.inductiveautomation.com/t/log4j-on-linux-windows/54005/4):
>
> Yes, should be good to go. The last version of Ignition that used log4j was 7.8, and it used something like log4j version 1.2.x, which isn’t affected by this CVE. Those who snoop around may find an artifact called log4j-over-slf4j, but this just a bridge that let us move from log4j to slf4j/logback without modifying every single file that had used a log4j logger.

---

_[View the full topic](https://forum.inductiveautomation.com/t/apache-log4j-vulnerability-cve-2021-44228/54050)._