Our Response to the Log4j Vulnerability

As you may be aware, the Apache Foundation recently announced that Log4j, a popular Java logging library, is vulnerable to remote code execution. MITRE has labeled the vulnerability as CVE-2021-44228 and assigned it the highest CVSS score (10.0). If exploited, this vulnerability can give an attacker full control of any impacted system.

Immediately following the announcement, our team began working to evaluate our product and internal services for any potential impact. We’d like to inform you that our product was not impacted by this vulnerability in any way.

Please visit this page for the most up-to-date information. If you are a customer and want more information, please file a support ticket or contact us at support@cruxos.com.

References
We are providing the following links to provide more context regarding the vulnerability:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228
https://logging.apache.org/log4j/2.x/security.html