topic RE: Is there any security advisory on impact of CVE-2021-44228? in Product Forum

Is there any security advisory on impact of CVE-2021-44228?

KushaShetty — Mon, 13 Dec 2021 15:44:00 GMT

Recently there is a critical vulnerability announced on Apache Log4j module. Though BP uses .net /C#/VB, we wanted to check if there is any specific announcements from BP on the same.

Thanks
Kusha

------------------------------
Kusha Shetty
Consultant
Tata consultancy services
Asia/Kolkata
------------------------------

RE: Is there any security advisory on impact of CVE-2021-44228?

vivek.kumar.goel — Mon, 13 Dec 2021 16:23:00 GMT

https://bpdocs.blueprism.com/Blue-Prism-Communications-Apache-Log4j.pdf

Check this for the official response.

------------------------------
Vivek Goel
------------------------------

RE: Is there any security advisory on impact of CVE-2021-44228?

TimW — Fri, 17 Dec 2021 08:34:00 GMT

Hello,

We have moved the advice to an HTML page so we can update the content quicker when there are developments in the investigation. You can find the latest details here: https://bpdocs.blueprism.com/security-announcement/cve-2021-44228-apache-log4j.htm
The URL for the PDF is still valid but the content has been replaced with a link to the above.

Thanks,

Tim

------------------------------
Tim Weight
Head of Technical Documentation and Publishing
Blue Prism
------------------------------