The Java logging library Apache Log4j2 is widely used in a variety of well-known applications, such as Apple iCloud, Microsoft Minecraft, Twitter, Steam and more. Reported and patched by the Apache Software Foundation last week, the Log4j2 logging framework vulnerability, CVE 2021-44228, also known as "Log4Shell", has attracted worldwide attention. Most of the attacks focus on cryptocurrency mining, which may be the worst vulnerability discovered in years. Security experts have pointed out that as the attacks are rising, enterprises and organizations must fix the vulnerability and upgrade to version 2.16.0 as soon as possible, or reach out to their software providers for more information.

TPIsoftware has examined all of its software products and assessed the potential security risks immediately. The latest versions of digiRunner 3.10 and digiLogs 2.1 do not use Log4j2, and users using these two latest versions do not need to worry about being attacked. The digiRunner 3.8, digiLogs 1.x, digiMars1.2 and earlier versions use the Log4j library as part of the Elasticsearch Client program, and users need to modify the settings when starting Java. The setting steps are simple. Please contact our customer service, or drop us an email at service@tpisoftware.com, for assistance.

Cybersecurity News｜Apache "Log4Shell" is Discovered as the Most Critical Vulnerability in Recent Years

Subscribe