Log4J Vulnerability - CVE-2021-44228

[Ian Schmidt]

Hello,

Can we get a statement from 3CX on CVE-2021-44228? Is the system affected by this vulnerability? If not, great! If so, is a patch coming and will action be required on the part of Administrators.

Thanks,
Ian

 

[loyer]

What about the 3cx SBC? I have a few Raspberry Pi out there installed following the standard 3cx documentation: https://www.3cx.com/docs/installing-pbx-raspberry-pi/

Any thoughts @pj3cx ?

 

[Evolute IT]

What about the 3cx SBC? I have a few Raspberry Pi out there installed following the standard 3cx documentation: https://www.3cx.com/docs/installing-pbx-raspberry-pi/

Any thoughts @pj3cx ?

The SBC doesn't use Apache/Java either so no Log4j in there, just like the PBX.

 

[Pierre_3CX]

Hi @loyer,
As ConceptsWeb there are no Apache/Java/log4j in 3CX SBC either.