# Log4j vulnerability

**URL:** <https://forum.inductiveautomation.com/t/log4j-vulnerability/54357>\
**Category:** Ignition\
**Tags:** ignition80\
**Created:** [December 21, 2021, 2:06pm UTC](https://forum.inductiveautomation.com/t/log4j-vulnerability/54357 "2021-12-21T14:06:27Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![tadeja.saje](https://avatars.discourse-cdn.com/v4/letter/t/b782af/32.png) [@tadeja.saje](https://forum.inductiveautomation.com/u/tadeja.saje)\
**Post date:** [December 21, 2021, 2:06pm UTC](https://forum.inductiveautomation.com/t/log4j-vulnerability/54357/1 "2021-12-21T14:06:27Z")

</div>

Hello,  
I read [https://support.inductiveautomation.com/hc/en-us/articles/4416204541709-Regarding-CVE-2021-44228-Log4j-RCE-0-day](https://support.inductiveautomation.com/hc/en-us/articles/4416204541709-Regarding-CVE-2021-44228-Log4j-RCE-0-day).  
I found library on my server log4j-over-slf4j-1.7.21.jar and on user system.  
Is this vulnerability,

Best regards?  
Tadeja

---

<div class="post-metadata">

**Author:** ![mazeyrat](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mazeyrat/32/10955_2.png) [@mazeyrat](https://forum.inductiveautomation.com/u/mazeyrat)\
**Post date:** [December 21, 2021, 2:11pm UTC](https://forum.inductiveautomation.com/t/log4j-vulnerability/54357/2 "2021-12-21T14:11:48Z")

</div>

see kevin reply:

False positive.

> [@Apache Log4J Vulnerability - CVE-2021-44228](https://forum.inductiveautomation.com/t/apache-log4j-vulnerability-cve-2021-44228/54050/10):
>
> So too with all of Automation Professionals’ modules.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [December 21, 2021, 2:22pm UTC](https://forum.inductiveautomation.com/t/log4j-vulnerability/54357/3 "2021-12-21T14:22:16Z")

</div>

Putting “log4j” in this forum’s search box works pretty well. /:

---

<div class="post-metadata">

**Author:** ![SKA](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ska/32/29528_2.png) [@SKA](https://forum.inductiveautomation.com/u/SKA)\
**Post date:** [December 22, 2021, 8:28am UTC](https://forum.inductiveautomation.com/t/log4j-vulnerability/54357/4 "2021-12-22T08:28:25Z")

</div>

> **[Regarding CVE-2021-44228 - Log4j RCE 0-day](https://support.inductiveautomation.com/hc/en-us/articles/4416204541709-Regarding-CVE-2021-44228-Log4j-RCE-0-day)**
>
> On December 9th, 2021, a new vulnerability was reported (CVE-2021-44228) against a common Java logging library, “log4j”. This vulnerability makes affected systems susceptible to having remote attac...

Just adding the official post.