Log4j Security Update
December 13, 2021
On Friday, Dec. 10, 2021 the Apache Software Foundation disclosed a critical vulnerability (CVE-2021-44228) in its “Log4j” software. The disclosure has received extensive news coverage because of the ubiquity of this particular software. Widely used across the internet, Log4j is an open source software component that is used by the largest organizations in the world. On Dec. 11, 2021 Apache released a patch to fix the vulnerability, and the Eagle Eye Networks security team has deployed the fix.
Eagle Eye customers do not need to take any action with their Eagle Eye Networks system, as updates are delivered via the cloud. We have not seen any evidence of the vulnerability being exploited at Eagle Eye Networks. While we consider this issue resolved, our security team will continue to monitor updates and announcements from official sources.
Customers can contact their RSM, or Eagle Eye Technical Support at [email protected] or +1-512-473-0501 with any questions.