Is community impacted by Log4J vulnerability?
Is Khoros community compaged by this log4j vulnerability: CVE-2021-44228
Forum Discussion
Got this response from our TAM today when asking for info:
"We completed a thorough investigation of our global infrastructure since we were made aware of the flaw on December 10 and found zero indication of any successful exploitation of this vulnerability in our environment. Further, we have identified and mitigated all of the known risks resulting from the vulnerability in our environment. As of 2021-12-11 2:45pm CT, all Khoros product infrastructure is considered mitigated against the known risk of this vulnerability.
We continue to remain vigilant while assessing our overall security posture and will further review our systems and services for potential risk and take appropriate actions should any new information about the vulnerability be discovered. "
Thanks for sharing this here. I was preparing to ask the same questions.
It would be nice to have an official statement from Khoros posted somewhere though.
