topic Is Qlik Sense vulnerable to the Log4Shell exploit? in Management & Governance

Is Qlik Sense vulnerable to the Log4Shell exploit?

kswindlehurst — Wed, 29 Jan 2025 16:57:53 GMT

Looks like centralized logging relies on Log4j.

Re: Is Qlik Sense vulnerable to the Log4Shell exploit?

PatrickQ — Sat, 11 Dec 2021 14:57:14 GMT

Hello,

Qlik is aware of the recently published security vulnerability in Apache Log4j, reference CVE-2021-44228 (also referred to as Log4Shell). As soon as the vulnerability was published, Qlik immediately began a security investigation to determine if and how Qlik’s products and services are impacted.

Our preliminary investigations have confirmed that Client-managed Qlik Sense Enterprise, QlikView, Nprinting are confirmed as not including the vulnerable component. Other Qlik products are still under evaluation and patches will be made available as necessary.

Thank you,
Patrick
Director, CSO Experience Programs
Qlik

Re: Is Qlik Sense vulnerable to the Log4Shell exploit?

PatrickQ — Sat, 11 Dec 2021 17:13:39 GMT

Ongoing updates will be posted to here:
Vulnerability Testing - Apache Log4j, reference C... - Qlik Community - 1869368