Log4j: CVE-2021-44228

1

Hello,

in regard to the latest log4j vulnerability, I would like to know if there are any actions one must to do protect/update a server running hivemq CE?

2

Hi @nhosko,

HiveMQ products and in extension HiveMQ CE are not affected by CVE-2021-44228 .

Currently, you don’t need to take any measures beyond standard best practices for securing a backend server (access control, firewalls, OS hardening, etc.).

For more information we released a blog post.

All the best
Georg

Edit: Added link to blog post.

2 Likes
3

Hello Georg,
thanks for the quick reaction!
Is this information also valid for older versions of HivMQ?

Greetings!
Reiner

4

Hi @Reinski ;

yes it is. We have released a blogpost regarding this:

https://www.hivemq.com/blog/hivemq-is-not-affected-by-log4shell/

All the best
Georg

1 Like