On December 10th, NIST published information about a vulnerability affecting Log4J, an extremely popular Java logging utility. CVE-2021-44228 has a CVSS score of 10, the most critical rating.
Mediawide has conducted an initial review of the Mediawide internally developed products and determined there was only a single application impacted by the CVE-2021-44228 related to Apache Log4j.
Continue reading “Log4J Remote Code Execution vulnerability”