Nexthink and Log4j - Security bulletin
Question
Is Nexthink V6 vulnerable to the recently disclosed security issue affecting Log4j?
Answer
No, following a thorough security assessment of our product and its components, Nexthink V6 customers are not impacted by this vulnerability.
Please note that our client-side applications such as Collector and Finder are not written in Java and therefore not impacted by this vulnerability.
Mitigating actions
None
Executive Summary
A remote code execution vulnerability was publicly disclosed on December 9, 2021. Log4j open-source library is one of the most popular Java logging frameworks. The vulnerability affects all Java applications that use Log4j with versions from 2.0 up to 2.14.1.
Vulnerability information
Please find additional information about the CVE:
Affected software
None
Disclaimer
The use of the software is subject to the terms and conditions of its applicable license agreement and then effective documentation. This information is provided “as-is” without a warranty of any kind.
Revision
First release
Last updated