--- title: Log4J Vulnerability Announcement date: 2024-09-23T05:10:00-07:00 author: admin canonical_url: "https://www.cryoserver.com/blog/log4j-vulnerability-announcement" section: Blog --- ![Log4J Vulnerability Announcement](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1516259762381-22954d7d3ad2-cropentropycstinysrgbfitmaxfmjpgixidMnwxMTc3M3wwfDF8c2VhcmNofDF8fGNvZGV8ZW58MHx8fHwxNjM5NDA0MDA5ixlibrb-1.2.1q80w2000.jpg?w=1920&h=1080&q=80&fm=webp&fit=clip&dm=1727093441&s=7e5a0deda6fa89f096312e35c984f830) Sep 23, 2024 # Log4J Vulnerability Announcement **UPDATE: 16/12/2021 1030hrs** Cryoserver is also **not** vulnerable to the variant - as we are not using the affected version of Log4J. --- **UPDATE: 14/12/2021 1630hrs** Following our previous announcement, we are pleased to confirm that **no** version of Cryoserver is vulnerable to CVE-2021-44228 Our initial examination of Cryoserver versions <v9.5.0 led us to believe that there existed a back-end vulnerability that could potentially be exploited.  We have now confirmed that this is not the case. Cryoserver customers pre-version 9.5 should nevertheless schedule an upgrade at some point in the future as good practice. --- **13/12/2021 1400hrs** On Friday 10th December, Apache announced a critical vulnerability within the LOG4J logging library for Java, called Log4Shell or LogJam. At 10/10 severity, this is comfortably one of the most serious IT vulnerabilities to have been discovered in recent memory, as Log4J is often installed on both Linux and Windows systems either directly, or often as a requirement of another package or system. Log4J is included on servers built by Cryoserver. **All our Cloud services** Are not vulnerable to CVE-2021-44228 **On-premises versions of Cryoserver on or above v.9.5.0** v9.5.0 released in January 2021 are not vulnerable to CVE-2021-44228 **Versions prior to v9.5.0 are partially vulnerable, as described below.** CVE-2021-44228 Attack Vectors: Please see: [https://www.lunasec.io/docs/blog/log4j-zero-day/](https://www.lunasec.io/docs/blog/log4j-zero-day/?utm_source=hs_email&utm_medium=email&utm_content=2&_hsenc=p2ANqtz-8--Hoqz3UR1BY6fd0Kn7UqWqN70O-DtRopa7UhoJRxYaDpEOgQ8-rXPlUUN4qrgMFRpYha2astfE8L0zIUxW4eQjTX4g&_hsmi=2) **Web Site Attack Vector** The attacker uses the public website to initiate the attack. No versions of Cryoservers' are vulnerable to this attack vector. **Back-End Attack Vector** The administrator of Cryoserver has set up an outbound connection to an LDAP server that is under the control of an attacker. The attacker manipulates the remote LDAP server to initiate the attack. > Cryoserver v9.5.0 and above is not vulnerable to this attack vector. As a next step, please email help@cryoserver.com if you have any concerns and/or wish to upgrade to our current 9.6 release. ## Read *More* [ ![No email archiving? Here’s why you need it urgently](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1554900773-4dd76725f876-cropentropycstinysrgbfitmaxfmjpgixidMnwxMTc3M3wwfDF8c2VhcmNofDR8fGFyY2hpdmV8ZW58MHx8fHwxNjI0ODc1NDk4ixlibrb-1.2.1q80w2000.jpg?w=1024&h=512&q=75&fm=webp&fit=crop&dm=1727093430&s=9861787cd6a0e6f0d61f24647b7c958f) Sep 23, 2024## No email archiving? Here’s why you need it urgently ### Some IT managers think dedicated email archiving is a nice-to-have solution their organisation… ](https://www.cryoserver.com/blog/no-email-archiving-heres-why-you-need-it-urgently "Go to Story") [ ![Employee email blunders: how to stop them causing reputational damage](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1603792907191-89e55f70099a-cropentropycstinysrgbfitmaxfmjpgixidMnwxMTc3M3wwfDF8c2VhcmNofDJ8fG1pc3Rha2V8ZW58MHx8fHwxNjM3NjY3MjAyixlibrb-1.2.1q80w2000.jpg?w=1024&h=512&q=75&fm=webp&fit=crop&dm=1727093438&s=0a190e3e004acea19756c56126200107) Sep 23, 2024## Employee email blunders: how to stop them causing reputational damage ### Email mistakes like the ones described here can hurt your organisation’s reputation and cost you… ](https://www.cryoserver.com/blog/employee-email-blunders-how-to-stop-them-causing-reputational-damage "Go to Story") [ ![The Cryoserver EU GDPR Panel](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1531412501799-1b4c354ca957-ixlibrb-1.2.1q80fmjpgcropentropycstinysrgbw2000fitmaxixideyJhcHBfaWQiOjExNzczfQ.jpg?w=1024&h=512&q=75&fm=webp&fit=crop&dm=1727093327&s=aaf51e26d20ed44bfd7bc9fef1ff204f) Sep 23, 2024## The Cryoserver EU GDPR Panel ### Cryoserver hosted an event in early November for our customers, whiched served both as a showcase… ](https://www.cryoserver.com/blog/the-cryoserver-eu-gdpr-panel "Go to Story") [ ![2019 Review](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1537470284582-8da71000386c-ixlibrb-1.2.1q80fmjpgcropentropycstinysrgbw2000fitmaxixideyJhcHBfaWQiOjExNzczfQ.jpg?w=1024&h=512&q=75&fm=webp&fit=crop&dm=1727093370&s=7b5e016d253b07c725eb11d6d68733a2) Sep 23, 2024## 2019 Review ### As we come to the end of the decade and enter a new information decade, we reflect over the past… ](https://www.cryoserver.com/blog/2019-review "Go to Story") [ ![What has been the impact of GDPR on Cryoserver customers?](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1523484489927-4aa8bf9a99d8-ixlibrb-1.2.1q80fmjpgcropentropycstinysrgbw2000fitmaxixideyJhcHBfaWQiOjExNzczfQ.jpg?w=1024&h=512&q=75&fm=webp&fit=crop&dm=1727093344&s=e50aa4678cf621c121ec4a9d79abe039) Sep 23, 2024## What has been the impact of GDPR on Cryoserver customers? ### Market responses to GDPR Leading up to and post GDPR, we have seen many of our Cryoserver email… ](https://www.cryoserver.com/blog/what-has-been-the-impact-of-gdpr-on-cryoserver-customers "Go to Story") [ ![Cryoserver Expands Globally to Botswana](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1591005383946-16532ba69aee-cropentropycstinysrgbfitmaxfmjpgixidM3wxMTc3M3wwfDF8c2VhcmNofDJ8fGJvdHN3YW5hfGVufDB8fHx8MTcxMDQxMzY5M3wwixlibrb-4.0.3q80w2000.jpg?w=1024&h=512&q=75&fm=webp&fit=crop&dm=1727093454&s=400fb017e8e565573b65e33a5403681f) Sep 23, 2024## Cryoserver Expands Globally to Botswana ### Cryoserver (UK) – Manufactures and supports “Advanced enterprise Email Archiving Software” ITWORX.… ](https://www.cryoserver.com/blog/cryoserver-expands-globally-to-botswana "Go to Story")