Log4J Vulnerability (CVE-2021-44228) and SimpleHelp

SimpleHelp News
1

The recently publicised zero day exploit (CVE-2021-44228) in the Log4J logging framework does not affect SimpleHelp server installations or any backend services. All versions of SimpleHelp are not reliant on Log4J so are not vulnerable to this exploit.

If you are interested in searching for vulnerabilities in installed software you can use tools such as Grype (https://github.com/anchore/grype). Grype can identify vulnerabilities in install software, including software that utilises nested / bundle sub-component. It is able to detect CVE-2021-44228 in installed software.

If you have any specific Log4J exploit queries send us a support email at support@simple-help.com .

4 Likes
2

Thank you for this input, George!

3

Thanks for that George

Kind regards
Anthony

4

Thanks George…You made my Monday!

1 Like
5

Is there any tools/scripts created by anyone that can be ran on all devices to detect log4j issues?