Is community impacted by Log4J vulnerability?
Is Khoros community compaged by this log4j vulnerability: CVE-2021-44228
Forum Discussion
The engineering teams worked very hard before the holidays to get everything locked down, updated, and fixed, and are continuing to be on top of this and other security issues. Site and data security is our top priority.
HelgaMarieAuran's answer from her TAM is correct:
"We completed a thorough investigation of our global infrastructure since we were made aware of the flaw on December 10 and found zero indication of any successful exploitation of this vulnerability in our environment. Further, we have identified and mitigated all of the known risks resulting from the vulnerability in our environment. As of 2021-12-11 2:45pm CT, all Khoros product infrastructure is considered mitigated against the known risk of this vulnerability.
We continue to remain vigilant while assessing our overall security posture and will further review our systems and services for potential risk and take appropriate actions should any new information about the vulnerability be discovered. "
