Page 1 of 1

Apache Log4j

Posted: Fri Dec 17, 2021 9:41 pm
by beckys
Hello,

There has been a lot of press recently about the following security vulnerabilities in the commonly-used library, Apache Log4j:

https://cve.mitre.org/cgi-bin/cvename.c ... 2021-44228
https://cve.mitre.org/cgi-bin/cvename.c ... 2021-45046

We became aware of CVE-2021-44228 late last week and immediately checked all of the McIDAS systems. We have concluded that CVE-2021-44228 and CVE-2021-45046 do not affect the McIDAS-X, McIDAS-V, McIDAS-XCD, or SDI GRB Appliance software. Please let us know if you have any questions.

Thank you and Happy Holidays,
McIDAS Help Desk