Log4Shell java vulnerability, is schedulix effected ?

[wim.ve...@billinghouse.nl]

Hi,

A new zero day vulnerability based on log4j has been found.

Since schedulix uses Java, it might use log4j. Is schedulix currently vulnerable for this attack ?

For details see https://www.lunasec.io/docs/blog/log4j-zero-day/

Regards, 
Wim Veldhuis.

[Ronald Jeninga]

Hi Wim,

Thank you very much for your inquiry! 

No worries, since we do not use log4j at all, the attack that targets it won't show effect.

I appreciate it a lot if potential issues are discussed in advance.

In this case it turns out to be false alert, but it could have been otherwise.

And I'd rather look at 500 false positives than to miss a real issue.

Thank you,

Ronald