Is there any security advisory on impact of CVE-2021-44228?

[KushaShetty]

Recently there is a critical vulnerability announced on Apache Log4j module.  Though BP uses .net /C#/VB, we wanted to check if there is any specific announcements from BP on the same.


Thanks
Kusha

------------------------------
Kusha Shetty
Consultant
Tata consultancy services
Asia/Kolkata
------------------------------

[VivekGoel]

https://bpdocs.blueprism.com/Blue-Prism-Communications-Apache-Log4j.pdf

Check this for the official response.

------------------------------
Vivek Goel
------------------------------

[TimW]

Hello,

We have moved the advice to an HTML page so we can update the content quicker when there are developments in the investigation. You can find the latest details here: https://bpdocs.blueprism.com/security-announcement/cve-2021-44228-apache-log4j.htm
The URL for the PDF is still valid but the content has been replaced with a link to the above.

Thanks,

Tim

------------------------------
Tim Weight
Head of Technical Documentation and Publishing
Blue Prism
------------------------------