January 11, 2022
Updates on Log4J Issues (v2.17.1 info)
Comments
(0)
January 11, 2022
Updates on Log4J Issues (v2.17.1 info)
ColdFusion developer for 20+ years, professional experience in 10 other languages & frameworks. Artist, nerd, Jeep enthusiast.
Explorer 5 posts
Followers: 2 people
(0)

As you all know, the Log4J exploit situation has continued to evolve, and our security team has just released the latest recommendations for dealing with the latest know issues.

Read the tech note here: https://helpx.adobe.com/coldfusion/kb/log4j-2-17-0-vulnerability-coldfusion.html

Folks who have already updated their Log4J versions to 2.17.1 are at the recommended level. However, please note that even though Log4J 2.17.0 was found to have a potential attack vector, our security team did not find any exploitable attack vector or mechanism with Adobe ColdFusion. That being said, as a best practice, it is still recommended that you upgrade your version to 2.17.1 as described in the article posted above.

0 Comments
Add Comment