topic Log4J vulnerability check in Management & Governance

Log4J vulnerability check

ErikDolstraDPGMedia — Wed, 29 Jan 2025 16:57:53 GMT

Hello,

At DPG Media we're doing a fulll check of our systems on the Log4J vulnerability.

https://www.lunasec.io/docs/blog/log4j-zero-day/

We find some references in your documentation to Log4J. Can you please verify that your service is not impacted by this vulnerability?

https://help.qlik.com/en-US/catalog/November2021/Content/Resources/PDFs/QlikCatalog_November_2021_SingleNode_InstallGuide.pdf#page=21

https://help.qlik.com/en-US/search/?q=log4j

Kind regards,

Erik Dolstra

Product Owner Data Tooling DPG Media

Re: Log4J vulnerability check

PatrickQ — Sat, 11 Dec 2021 14:56:14 GMT

Hi Erik,
Qlik is aware of the recently published security vulnerability in Apache Log4j, reference CVE-2021-44228 (also referred to as Log4Shell). As soon as the vulnerability was published, Qlik immediately began a security investigation to determine if and how Qlik’s products and services are impacted.

Our preliminary investigations have confirmed that Client-managed Qlik Sense Enterprise, QlikView, Nprinting are confirmed as not including the vulnerable component. Other Qlik products are still under evaluation and patches will be made available as necessary.

Thank you,

Patrick
Director, CSO Experience Programs
Qlik

Re: Log4J vulnerability check

PatrickQ — Sat, 11 Dec 2021 17:13:54 GMT

Ongoing updates will be posted to here:
Vulnerability Testing - Apache Log4j, reference C... - Qlik Community - 1869368