Is Business Central impacted by the Log4j vulnerability?

 

Background: The recently announced Log4j vulnerability is impacting many systems that rely on this popular open source package.  To be impacted by this module, an unpatched server running the Log4j package must be exposed to the public internet.  Additionally, this package is used with Java software implementations and on Apache web servers.

 

Microsoft support has provided the following response:

As of 14 December 2021, the Business Central Security team is not aware of any currently supported versions of Business Central or Dynamics NAV being impacted by the Log4j RCE vulnerability (CVE-2021-44228). The determination may be subject to change at any given time based upon investigative findings.

Was this article helpful?
0 out of 0 found this helpful

Comments

0 comments

Article is closed for comments.