Log4j CVE-2021-44228

AndreasT · Post by **AndreasT** » Mon Dec 13, 2021 11:35 am

Is OpenEMM affected by the Log4j vulnerability the BSI has reported the last days?

Post by **maschoff** » Mon Dec 13, 2021 12:19 pm

nhondong · Post by **nhondong** » Fri Dec 17, 2021 7:22 am

Hi,

is there any official Statement with more information to this Bulletin?
openemm uses log4j in the affected Version. (1.2)

Please tell us why openemm is not affected.

Thanks.

Nils

Post by **maschoff** » Fri Dec 17, 2021 8:54 am

Because OpenEMM does not use the JMSAppender of Log4j1.

OpenEMM Technical Support Forum

Log4j CVE-2021-44228

Log4j CVE-2021-44228

Re: Log4j CVE-2021-44228

Re: Log4j CVE-2021-44228

Re: Log4j CVE-2021-44228