Skip to content

SOLIDserver NOT Impacted by Log4j Security Vulnerability

December 13, 2021 | Written by: Surinder Paul | , , ,

Summary

Image De Larticle


The EfficientIP SOLIDserver Solution is not affected by the security vulnerability described in the CVE-2021-44228 as it does not in any way use the Apache Log4j library.

Following publicity around the Apache Log4j security vulnerability last week-end we have received a lot of calls from customers, partners and community friends asking about the possible impact on our DDI solution, especially on the API endpoint that may be used in all IT automation as the IPAM is the central source of network truth. We can assure our customers that our solution is not using Java as a software component and that it does not use Log4j for logging activities. SOLIDserver is therefore a safe solution with regards to this vulnerability that was demonstrated in the past at Blackhat 2016 and fixed in version 2.15.0 of Log4j released early in December.

This new security topic demonstrates the importance of architecture, network topology, service separation and continuous testing. It mainly highlights the advantage of regular patching of any software service, including infrastructure appliances. Inventory of applications, devices, IP addresses and most generally of assets is key in modern IT. We will have to face many other security challenges linked to software. When it is on OpenSource, things are getting fixed quickly, proprietary software needs to be regularly checked and patched.

author avatar
Surinder Paul Global Product Marketing Manager
Surinder Paul is the Global Product Marketing Manager at EfficientIP, acting as the vital link between the product and sales teams by articulating business value and customer outcomes of technology. He has been working in the DDI market for nearly 10 years covering DNS-DHCP-IPAM, network automation, and network security. Prior to EfficientIP, Surinder has more than 25 years international experience at companies such as British Airways, Nortel and SAP.

Simplify & Secure Your Network

When our goal is to help companies face the challenges of modern infrastructures and digital transformation, actions speak louder than words.

Talk to an expert