# Log4j File Issue For Cyber Attack

**URL:** <https://forum.inductiveautomation.com/t/log4j-file-issue-for-cyber-attack/54387>\
**Category:** Ignition\
**Created:** [December 22, 2021, 8:25am UTC](https://forum.inductiveautomation.com/t/log4j-file-issue-for-cyber-attack/54387 "2021-12-22T08:25:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sagar.iparkar](https://avatars.discourse-cdn.com/v4/letter/s/47e85d/32.png) [@sagar.iparkar](https://forum.inductiveautomation.com/u/sagar.iparkar)\
**Post date:** [December 22, 2021, 8:25am UTC](https://forum.inductiveautomation.com/t/log4j-file-issue-for-cyber-attack/54387/1 "2021-12-22T08:25:10Z")

</div>

Hi Team,

As per our customer “Log4j” file is used by cyber criminals and they can exploit the software flaw and may easily gain access to the server giving them an entry into other parts of corporate network. this vulnerability is affecting not only our client, but users all over the world.

Can you please provide solution for secure application (Log4j File ) from cyber attack.

 ![log4j](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/4/044a9553a5a224ee80f432a052d6253fe070a781.jpeg)

---

<div class="post-metadata">

**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\
**Post date:** [December 22, 2021, 8:27am UTC](https://forum.inductiveautomation.com/t/log4j-file-issue-for-cyber-attack/54387/2 "2021-12-22T08:27:22Z")

</div>

I’ll refer you to the official answer

> **[Regarding CVE-2021-44228 - Log4j RCE 0-day](https://support.inductiveautomation.com/hc/en-us/articles/4416204541709-Regarding-CVE-2021-44228-Log4j-RCE-0-day)**
>
> On December 9th, 2021, a new vulnerability was reported (CVE-2021-44228) against a common Java logging library, “log4j”. This vulnerability makes affected systems susceptible to having remote attac...

Its a non-problem for ignition.

---

<div class="post-metadata">

**Author:** ![sagar.iparkar](https://avatars.discourse-cdn.com/v4/letter/s/47e85d/32.png) [@sagar.iparkar](https://forum.inductiveautomation.com/u/sagar.iparkar)\
**Post date:** [December 22, 2021, 9:49am UTC](https://forum.inductiveautomation.com/t/log4j-file-issue-for-cyber-attack/54387/3 "2021-12-22T09:49:34Z")

</div>

We are using 8.0.10 in below link includes LTS versions 7.9 and 8.1,Can please confirm  
8.0.10 version is safe ?

---

<div class="post-metadata">

**Author:** ![pascal.fragnoud](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pascal.fragnoud/32/24728_2.png) [@pascal.fragnoud](https://forum.inductiveautomation.com/u/pascal.fragnoud)\
**Post date:** [December 22, 2021, 10:08am UTC](https://forum.inductiveautomation.com/t/log4j-file-issue-for-cyber-attack/54387/4 "2021-12-22T10:08:21Z")

</div>

> Inductive Automation has conducted a full audit of Ignition’s direct and transitive dependencies to confirm that **log4j is not used or included in any supported or unsupported release of Ignition** , and as such it is not vulnerable to the RCE outlined in CVE-2021-44228

What more do you need ?

---

<div class="post-metadata">

**Author:** ![sagar.iparkar](https://avatars.discourse-cdn.com/v4/letter/s/47e85d/32.png) [@sagar.iparkar](https://forum.inductiveautomation.com/u/sagar.iparkar)\
**Post date:** [December 22, 2021, 10:18am UTC](https://forum.inductiveautomation.com/t/log4j-file-issue-for-cyber-attack/54387/5 "2021-12-22T10:18:59Z")

</div>

This is enough and important ,Thank you for quick response.