Author Topic: Log4J check  (Read 10798 times)

Guillaume

  • EA Practitioner
  • ***
  • Posts: 1359
  • Karma: +42/-2
    • View Profile
    • www.umlchannel.com
Log4J check
« on: December 15, 2021, 07:57:51 pm »
Hi,

Since the recent Log4J security alert, a number of clients are asking if EA and Prolaborate are using Log4J.
My understanding is that none of Sparx solutions, whether it's EA or Prolaborate are using it since this is mainly a Java library.

Can you confirm if this is correct?

Thanks
Guillaume
Guillaume

Blog: www.umlchannel.com | Free utilities addin: www.eautils.com


PeterHeintz

  • EA User
  • **
  • Posts: 967
  • Karma: +58/-18
    • View Profile
Re: Log4J check
« Reply #1 on: December 15, 2021, 10:32:00 pm »
An official statement regarding this is required from Sparx including Pro Cloud Server is required!
Best regards,

Peter Heintz

Eve

  • EA Administrator
  • EA Guru
  • *****
  • Posts: 8064
  • Karma: +118/-20
    • View Profile
Re: Log4J check
« Reply #2 on: December 16, 2021, 08:14:39 am »
There's no Java in either, so there's no Log4j.

Even if Prolaborate uses Log4net, that isn't impacted by the vulnerability.