log4j vulnerability in older versions

[joegriffitts]

I know it was answered in the TestComplete forum that TestComplete/TestExecute/TestLeft are not effected by the log4j vulnerability. But what about LoadComplete? More specifically, previous versions. Although our TestComplete license is current, we are running an older version of LoadComplete and want to ensure we either don't have an issue or fix it. Thank you!

[D0UG · Accepted solution]

Hi @joegriffitts,

SmartBear is aware of the recently disclosed security issue affecting the open-source Apache “Log4j2” utility (CVE-2021-44228). The Security team is actively working to mitigate our exposure and continue to provide enhanced monitoring of our platforms to safeguard information. Resources potentially affected by this vulnerability have been identified and our Information Technology and Information Security teams are working closely together to remediate any potential exposure in our platforms and environment. SmartBear is also actively communicating with our partners for due diligence in mitigation of this vulnerability related to embedded tools and services.

Please check https://smartbear.com/security/cve-2021-44228/ for further updates.