CVE-2021-44228 (Log4Shell)

Incident Report for SpyCloud

Resolved

As you may have heard in the news, a critical vulnerability referred to as 'Log4Shell' or CVE-2021-44228 was recently discovered. We're reaching out to inform you that SpyCloud does not use Log4j in any of its products and is not affected by this vulnerability. In addition, we are monitoring the impact to our vendors in order to mitigate any risks which could result from partnerships with those vendors. To date, we have not received any confirmation of adverse impact to our vendors as a result of this vulnerability and we will continue to monitor for new developments on the matter.

Posted Dec 10, 2021 - 12:00 CST