Newforma experienced a notice incident on December 15, 2021, lasting 29d 21h. The incident has been resolved; the full update timeline is below.
Update timeline
- monitoring Dec 15, 2021, 04:53 PM UTC
Recently it was announced that Apache Log4j2 library for Java was vulnerable to remote code execution (RCE) exploit CVE-2021-44228 allowing access to servers using it. Newforma engineering and security teams have reviewed our technology and infrastructure, confirming that we do not use or depend on the Log4J2 Library at the center of the CVE. We are continuously monitoring all our environments for any indication of active threats and exploits. If you would like further details please review the knowledge base article in our Community located here: https://customercommunity.newforma.com/s/article/Vulnerability-with-log4j2-library
- resolved Jan 14, 2022, 02:33 PM UTC
This incident has been resolved.