Support

 View Only

  • 1.  Log4j

    Posted 12-13-2021 04:26
    Edited by Andrew MacCormack 12-13-2021 05:38
    Is JAMA impacted by CVE-2021-44228 on log4j? Are there plans to do an update to fix?

    ------------------------------
    Andrew MacCormack
    LumiraDX
    ------------------------------


  • 2.  RE: Log4j

    Posted 12-13-2021 07:44
    Edited by Josh Turpen 12-13-2021 07:44
    We understand the recently published security vulnerability in Log4j may be causing concern. We have no evidence that this exploit has been used against Jama Connect. However, in an abundance of caution our architecture and engineering teams are reviewing our code, dependencies and configurations to ensure that Jama Connect continues to be as secure as possible.

    Jama has customers in the cloud and on-premesis, and will update customers directly based on their deployment model if further action is required.

    ------------------------------
    Josh Turpen
    Chief Product Officer

    ------------------------------

    Original Message


  • 3.  RE: Log4j

    Posted 12-13-2021 08:35
    Appreciate the rapid response!

    ------------------------------
    Andrew MacCormack
    LumiraDX
    ------------------------------

    Original Message


  • 4.  RE: Log4j

    Posted 12-14-2021 02:27
    Edited by Abubakar Karajagi 12-14-2021 03:21
    Hello Josh ,

    Any update on this ?

    ------------------------------
    Abubakar Karajagi
    ------------------------------

    Original Message


  • 5.  RE: Log4j

    Posted 12-14-2021 14:53
    Abubakar,

    We have updated guidance here: https://community.jamasoftware.com/browse/announcements?AnnouncementKey=97eeed3a-c75c-4363-965b-005538201b3c.

    If you have further questions please submit a ticket and we can review your specific situation.

    ------------------------------
    Josh Turpen
    Chief Product Officer
    Jama Software
    ------------------------------

    Original Message