Please sign in or register to access software information via the Iress Community.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Iress Notifications
Key updates from across Iress
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Log4j remote code vulnerability (CVE-2021-44228; CVE-2021-45046; and CVE-2021-45105)

kelly.fisk
Iress People

Log4j remote code vulnerability (CVE-2021-44228; CVE-2021-45046; and CVE-2021-45105)

This page was last updated on Tuesday 21 December at 9.45pm AEST

Since first detecting the potential vulnerability in the widely-used Java logging library Apache Log4j, Iress’ security and engineering teams have been comprehensively reviewing all aspects of our software. 

Overall, Iress’ software has been deemed safe from the vulnerability. In some limited and specific cases use of the impacted library has been identified and these instances have been remediated. We have also reviewed Iress' use of third party software and are implementing the recommended changes from those external vendors.

Importantly, our testing has not detected any compromisation of our technology, systems and data.

For information on specific products, please contact your Iress account manager.