Return
-
Title
Impact of CVE-2021-44228 Apache Log4j Vulnerability -
Description
A critical vulnerability was recently discovered related to systems/software that run Apache Log4j versions 2.0-beta9 through 2.12.1 and 2.13 through 2.15.More information about this vulnerability can be found here: National Vulnerability database - CVE-2021-44228 (nist.gov)
-
Cause
This is an industry-wide vulnerability affecting the Apache Log4j itself and is not specific to syslog-ng Store Box. -
Resolution
Syslog Store Box does not use the affected versions of Apache Log4j, therefore is not affected by CVE-2021-44228