My security analyst asked me if Ignition is affected by the Apache Log4j2 vulnerability identified this weekend. Can someone confirm or deny? We are running version 8.06. Thanks!!! https://nvd.nist.gov/vuln/detail/CVE-2021-44228 Apache Log4j2 <=2.14.1 JNDI features used in configuration, log me…

Not affected. [image] Regarding CVE-2021-44228 - Log4j RCE 0-day On December 9th, 2021, a new vulnerability was reported (CVE-2021-44228) against a common Java logging library, “log4j”. This vulnerability makes affected systems susceptible to having remote attac... …

Apache Log4j2 Vulnerability

Ignition

Kevin.Herron December 13, 2021, 2:46pm 2

Not affected.

3 Likes