Log4Shell vulnerability and our services

Angled view of a partly open laptop resting on a modern molded chair, split down the middle with the left half in vivid warm color and glowing keyboard and screen and the right half rendered in high-contrast black-and-white.

Written by

Jaakko Alajoki

Details

December 16, 2021

1–2 minutes

This article may contain outdated information as it was published 5 years ago.

Last week security researchers found a highly severe vulnerability – known as Log4Shell – from a software component called Apache Log4j. The component is widely used and this vulnerability has already been actively exploited. It has already been rated as one of the worst security flaws ever and it has gained a lot of publicity.

We investigated the vulnerability and our servers and applications. Based on our research our systems are not exposed to the Log4shell vulnerability. It’s mainly related to Java based server applications which we are not using. Software like WordPress or WooCommerce are not affected. Server applications we use like NGINX, PHP-FPM and MariaDB are not affected either.

We will keep actively monitoring the situation and keeping contact with our vendors to ensure safety.

There is a list of all known vulnerable and not vulnerable software.