Forum Discussion

lisadonlan's avatar
lisadonlan
New Member
4 years ago
Solved

LOG4J Vulnerability

Has the LogMeIn Team done analysis and mitigated any risk from the LOG4J Vulnerability ? Are there any patches or updates that we need to be aware of?
  • AshC's avatar
    AshC
    4 years ago

    Thank you for your patience.

    After a full review we can confirm that LogMeIn Central is not affected by the Log4j vulnerability.

     

    On Friday, December 10th, a zero-day vulnerability affecting a widely utilized open-source logging tool that is part of Apache Logging Services impacted a meaningful subset of the software industry.  The security of our services and customer data is a top priority for LogMeIn.  Upon becoming aware of the vulnerability, LogMeIn investigated and deployed patches where necessary, in order to ensure that our customers and users may continue to safely and securely utilize our services.  We continue to monitor for vulnerabilities and respond should they arise to keep our software and customers safe and secure

mockingjay's avatar
mockingjay
Visitor
4 years ago

this 'no answer' strategy they're employing is absolutely unacceptable. You need to communicate to people better. If you don't know the impacts yet, say that, but provide some newer update other than days and days ago.

AshC's avatar
AshC
Retired GoTo Contributor
4 years ago

Thank you for your patience.

After a full review we can confirm that LogMeIn Central is not affected by the Log4j vulnerability.

 

On Friday, December 10th, a zero-day vulnerability affecting a widely utilized open-source logging tool that is part of Apache Logging Services impacted a meaningful subset of the software industry.  The security of our services and customer data is a top priority for LogMeIn.  Upon becoming aware of the vulnerability, LogMeIn investigated and deployed patches where necessary, in order to ensure that our customers and users may continue to safely and securely utilize our services.  We continue to monitor for vulnerabilities and respond should they arise to keep our software and customers safe and secure