Log4J vulnerability check

[ErikDolstraDPGMedia]

Hello,

At DPG Media we're doing a fulll check of our systems on the Log4J vulnerability. 

https://www.lunasec.io/docs/blog/log4j-zero-day/

We find some references in your documentation to Log4J. Can you please verify that your service is not impacted by this vulnerability?

https://help.qlik.com/en-US/catalog/November2021/Content/Resources/PDFs/QlikCatalog_November_2021_Si...

https://help.qlik.com/en-US/search/?q=log4j

Kind regards,

Erik Dolstra

Product Owner Data Tooling DPG Media

[PatrickQ]

Hi Erik,
Qlik is aware of the recently published security vulnerability in Apache Log4j, reference CVE-2021-44228 (also referred to as Log4Shell). As soon as the vulnerability was published, Qlik immediately began a security investigation to determine if and how Qlik’s products and services are impacted. 

Our preliminary investigations have confirmed that Client-managed Qlik Sense Enterprise, QlikView, Nprinting are confirmed as not including the vulnerable component. Other Qlik products are still under evaluation and patches will be made available as necessary.

Thank you,

Patrick
Director, CSO Experience Programs
Qlik

[PatrickQ]

Ongoing updates will be posted to here:
Vulnerability Testing -  Apache Log4j, reference C... - Qlik Community - 1869368