Our Blog

Log4Shell Vulnerability

Published: 14 December 2021
Author: Paul Robinson

Log4Shell is the name assigned to a vulnerability in the Java library Log4J. This has been published as CVE-2021-44228.

It affects any Java program that uses a logging library log4j versions 2.0-beta9 to 2.14.1 inclusive. This is a big deal because it is extremely easy to exploit the vulnerability.

Calpendo does use log4j, but it uses an older version that is not affected by this vulnerability. We will be updating to use the very latest version, but no mitigation is necessary for Calpendo to address the Log4Shell problem.

Latest Posts

Exprodo Software achieves ISO 27001 certification
Calpendo Multi-Site Enterprise
Calpendo @ ISMRM 23
How has Calpendo helped you?
Embedding outside content in Calpendo
User Status in Calpendo

Ready to Learn More?

To begin exploring the powers of Calpendo, please click below to arrange an online demonstration with one of our Support Specialists, or start a free trial of the most powerful and intuitive Core Facility Management System.