Apache Log4j2 Vulnerability (CVE-2021-44228)

General Details

Impact on Procuro

Procuro’s products do not use Apache Log4j and there are no known threats to your existing Procuro solutions due to Log4j. We will continue to monitor the situation and alert our customers of any changes if necessary.

Recommendation

Procuro recommends affected customers should upgrade to the latest version of Log4j2 as soon as possible. For situations where an upgrade is not possible, customers can mitigate by changing the log4j2.formatMsgNoLookups property to “true”.

More information

Visit the Apache Foundation page.

Click here to sign up for our Tech Support Newsletter stay updated regarding this topic.