2 years ago

Category: Jenkins

TL;DR: If you are a cloud customer of Uleska, you are not vulnerable to log4shell. Since the log4shell vulnerability (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228) was discovered last week, we have been ensuring our cloud platform and those of our on-premise customers are appropriately protected from any issues arising from it. We are satisfied that the Uleska platform is not affected by this vulnerability.https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228 This post will cover the parts of the Uleska system, including associated tools, that we have checked over during our review.

We have upgraded our cloud instance, and are contacting customers who are ZAP users to prompt them to make this upgrade.https://www.zaproxy.org/blog/2021-12-10-zap-and-log4shell/https://www.zaproxy.org/blog/2021-12-10-zap-and-log4shell/