log4j vulnerability CVE-2021-44228 - Status CHILI products

The media and the BSI are currently warning of a security vulnerability in the Java library log4j. You can read more about this at the Federal Office for Information Security.

All CHILI products are NOT affected by the reported security vulnerability (CVE-2021-44228).

Of course, we regularly check our own and third-party software (SOUP) for security vulnerabilities. We also do not use the affected versions of Log4j in the third-party software we use. The only exception is the KBV software, which has already been replaced by a current version.

Should further security-relevant information become available, we will inform you accordingly and take necessary measures.

Back