Critical security risk log4j

Announcement

INIT is currently assessing the situation and evaluating our products for the impact of the widely reported log4j/log4shell vulnerability associated with CVE2021-44228.

This evaluation relates to both the vulnerability itself and risk of exploitability. We believe the highest risk of exploit exists on externally facing (Internet facing) systems; therefore, if a vulnerable INIT product is not accessible for the Internet, then the risk of exploit may be reduced, but not eliminated. 

INIT will provide vulnerability assessment, potential guidance and mitigations for vulnerable software when our assessments are completed. 

If you have further questions, please contact INIT support via https://issuetracking.init-ka.de.