Documentation
kaazing.io KWG KWIC
Downloads
Kaazing Client SDKs Kaazing Gateway KWIC
Company
Contact Us Support

Documentation
kaazing.io KWG KWIC
Downloads
Kaazing Client SDKs Kaazing Gateway KWIC
Company
Contact Us Support

Blog

Introducing the kaazing.io Kafka Sandbox

Developing a Kafka-powered, real-time web app has never been this easy. You no longer need your...

Kafka Web Streaming With The Google Cloud Platform and kaazing.io

Overview kaazing.io is an iPaaS that allows you to build highly resilient and scalable real-time mobile...

Kaazing prepares and protects worldwide assets and employees of major cloud company with DisasterAWARE Enterprise™

Deep historic data and predictive modeling help companies stay ahead of the curve  before natural disasters...

Exclusive Unveiling of DisasterAWARE Enterprise™ at the San Jose Tech Museum by Bob Miller, CEO Kaazing

Natural disaster damage costs the United States $306 billion and just California alone $80 billion in...

KAAZING UNVEILS DisasterAWARE ENTERPRISE™ REAL TIME RISK MANAGEMENT PLATFORM FOR BUSINESSES WORLDWIDE

KAAZING UNVEILS DisasterAWARE ENTERPRISE™ REAL TIME RISK MANAGEMENT PLATFORM FOR BUSINESSES WORLDWIDE San Jose, CA, March...

Kaazing and Pacific Disaster Center partner to make leading DisasterAWARE™ technology available to businesses worldwide

Kaazing and Pacific Disaster Center partner to make leading DisasterAWARE™ technology available to businesses worldwide San...

Disaster tech being developed, advanced to improve destruction prevention

In the next few months, Kaazing and the Pacific Disaster Center will be launching a joint...

Kaazing technology helps protect Indonesia

Kaazing technology is helping to protect the citizens of Indonesia through InWARE, a country-specific version of...

Video: Kaazing Product Suite

CEO Bob Miller talks us through the Kaazing Product Suite and how it enables real-time, event-driven...

Posts navigation

1 2 3 … 9 >

Kaazing Gateway and Log4j Vulnerability CVE-2021-44228

December 21, 2021

The version of log4j (1.2.17, also referred to as log4j1) used in the Kaazing Gateway/KWIC is not affected by the vulnerability in CVE-2021-44228. As stated by Apache here https://logging.apache.org/log4j/2.x/security.html, "Log4j 1.x is not impacted by this vulnerability".

Official statements from Microsoft and Amazon regarding their use of log4j1:

Microsoft: https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/, "Systems running on Log4j 1.x are not impacted by these vulnerabilities."

Amazon: Amazon is using log4j version 1.2.17 for Amazon Kafka in their MSK product, which they have stated here https://aws.amazon.com/security/security-bulletins/AWS-2021-006/, "Please note that the builds of Apache Kafka and Apache Zookeeper offered in MSK currently use log4j 1.2.17, which is not affected by this issue."

The use of log4j 1.2.17 in Kaazing Gateway/KWIC is not impacted by CVE-2021-44228. We have no current plans to upgrade from log4j1 to log4j2.

Kaazing. All Rights Reserved.

Privacy Statement Terms of Service