--- title: Log4j vulnerability, aka Log4Shell (CVE-2021-45046 / CVE-2021-44228) description: Log4j vulnerability, aka Log4Shell (CVE-2021-45046 / CVE-2021-44228) --- [Skip to content](https://support.block64.com/log4j-vulnerability-aka-log4shell-cve-2021-45046-/-cve-2021-44228#main-content) [Customer Portal](https://customerportal.block64.com/tickets-view?hsLang=en) [![Logo - dark](https://support.block64.com/hs-fs/hubfs/Logo%20-%20dark.png?width=350&height=86&name=Logo%20-%20dark.png)](https://support.block64.com/?hsLang=en) - [Home](https://support.block64.com/) - [Insights Portal](https://insights.block64.com/login) - Platform Show submenu for Platform - [Block 64](https://www.block64.com/) - [Why Block 64?](https://www.block64.com/#:~:text=What%20makes%2CBlock%2064%20different) - Solutions Show submenu for Solutions - [Unified Visibility](https://www.block64.com/solutions/unified-visibility) - [Cost Optimization](https://www.block64.com/solutions/cost-optimization) - [Proactive Security](https://www.block64.com/solutions/proactive-security) - [Compliance](https://www.block64.com/solutions/continuous-compliance) - Learn Show submenu for Learn - [Quick Start Guides](https://support.block64.com/getting-started) - [Integrations](https://support.block64.com/documentation#integrations) - [Blog](https://www.block64.com/blog) - Support Show submenu for Support - [Trust Center](https://trust.block64.com/) - [Service Health](https://status.block64.com/) - [Partners](https://www.block64.com/partners) - [Contact Us](https://www.block64.com/contact) - [Pricing](https://www.block64.com/pricing) - [Get Started Free](https://www.block64.com/free-trial) Open main navigation Close main navigation - [Home](https://support.block64.com/) - [Insights Portal](https://insights.block64.com/login) - Platform Show submenu for Platform - [Block 64](https://www.block64.com/) - [Why Block 64?](https://www.block64.com/#:~:text=What%20makes%2CBlock%2064%20different) - Solutions Show submenu for Solutions - [Unified Visibility](https://www.block64.com/solutions/unified-visibility) - [Cost Optimization](https://www.block64.com/solutions/cost-optimization) - [Proactive Security](https://www.block64.com/solutions/proactive-security) - [Compliance](https://www.block64.com/solutions/continuous-compliance) - Learn Show submenu for Learn - [Quick Start Guides](https://support.block64.com/getting-started) - [Integrations](https://support.block64.com/documentation#integrations) - [Blog](https://www.block64.com/blog) - Support Show submenu for Support - [Trust Center](https://trust.block64.com/) - [Service Health](https://status.block64.com/) - [Partners](https://www.block64.com/partners) - [Contact Us](https://www.block64.com/contact) - [Pricing](https://www.block64.com/pricing) - [Get Started Free](https://www.block64.com/free-trial) - - [Customer Portal](https://customerportal.block64.com/tickets-view) - [Submit a Support Request](https://support.block64.com/kb-tickets/new) [Submit a Support Request](https://support.block64.com/kb-tickets/new?hsLang=en) How can we assist you today? - There are no suggestions because the search field is empty. 1. [Block 64 Support Center](https://support.block64.com/?hsLang=en) 2. [Documentation](https://support.block64.com/documentation?hsLang=en) 3. [Privacy and Security](https://support.block64.com/documentation?hsLang=en#privacy-and-security) # Log4j vulnerability, aka Log4Shell (CVE-2021-45046 / CVE-2021-44228) On December 9th, 2021, a vulnerability in the common Java utility Log4J was detected that essentially allows for remote code execution (RCE) without authentication. Many of our partners and customers wish to understand if any of their suppliers are exposed to this vulnerability – as they should. We are asking our key partners and suppliers similar questions and many have issued notices such as this one. **Block 64’s products are not built in, nor are they executed via, Java**, and as a result, do not use Log4j or any ported versions of Log4j, and are not exposed to this vulnerability. To ensure no other methods could be used to exploit the Log4J vulnerability, Block 64 has conducted a thorough review of our DevOps processes and the underlying tools we use to build, manage and support our software, and found no use of or dependency on Log4J. That said, the Log4j vulnerability is a wide-ranging vulnerability affecting core technology including routers, billing systems and many other layers of technology – it is a developing story, and one we are watching closely to ensure that we react appropriately to any new facets to the threats it represents. We will continue to update on our progress in doing so here. **Assessing Your Own Exposure** Block 64 have released report that matches installed software titles in your environment with reported vulnerabilities from the [CISA list of known exposures](https://github.com/cisagov/log4j-affected-db), using a natural language comparison methodology to account for the differences in ways installed software show up across versions, editions and even from customer to customer.   Because the ways vulnerabilities are reports does not always line up tidily to the way software shows up in an environment, we have assigned a confidence rating to our report that reports the likelihood of a match to a known vulnerability:     The Block 64 report will display any affected application versions, however due to the diffuse nature in which Log4j can be used in an environment, full detection will involve scanning your endpoints entirely to look for any affected .jar files. The below diagram, from the US Cybersecurity and Infrastructure Security Agency, describes methodologies for detection of exposure:   *Source: [https://www.cisa.gov/uscert/apache-log4j-vulnerability-guidance](https://www.cisa.gov/uscert/apache-log4j-vulnerability-guidance)* [CISA’s page](https://www.cisa.gov/uscert/apache-log4j-vulnerability-guidance) on this exploit contains lists of affected products, as well as a simple scanning tool to look for affected .jar files. Please note that this level of drive scanning can be quite resource intensive, but we believe it to be the only way to be certain all potential exposure points for this vulnerability can be assessed. For more information on this vulnerability, please visit the following links: [CISA Apache Log4j Vulnerability Guidance](https://www.cisa.gov/uscert/apache-log4j-vulnerability-guidance) [Apache’s notes on the Log4J vulnerability](https://logging.apache.org/log4j/2.x/security.html) [National Vulnerability Database CVE Entry](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) [Microsoft Guidance on Prevention, Detection and Indicators of Compromise](https://www.microsoft.com/security/blog/2021/12/11/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation/) For any more information or questions, please raise a support ticket. - [Getting Started](https://support.block64.com/getting-started?hsLang=en#main-content) - [Free Trial Onboarding](https://support.block64.com/getting-started?hsLang=en#free-trial-onboarding) - [Start Your Subscription](https://support.block64.com/getting-started?hsLang=en#start-your-subscription) - [Discovery Application Installation](https://support.block64.com/getting-started?hsLang=en#discovery-application-installation) - [Discovery Appliance Setup](https://support.block64.com/getting-started?hsLang=en#discovery-appliance-setup) - [Discovery Agent Deployment](https://support.block64.com/getting-started?hsLang=en#discovery-agent-deployment) - [Insights Reports](https://support.block64.com/insights-reports?hsLang=en#main-content) - [IT Asset Management](https://support.block64.com/insights-reports?hsLang=en#it-asset-management) - [Security](https://support.block64.com/insights-reports?hsLang=en#security) - [Cloud & Infrastructure](https://support.block64.com/insights-reports?hsLang=en#cloud-infrastructure) - [Legacy Combine User Guide](https://support.block64.com/insights-reports?hsLang=en#legacy-combine-user-guide) - [Troubleshooting](https://support.block64.com/troubleshooting?hsLang=en#main-content) - [Discovery: Insights Portal](https://support.block64.com/troubleshooting?hsLang=en#discovery-insights-portal) - [Insights Calculations](https://support.block64.com/troubleshooting?hsLang=en#insights-calculations) - [Discovery: Block 64 Windows Application](https://support.block64.com/troubleshooting?hsLang=en#discovery-block-64-windows-application) - [Discovery: BlockBox Appliance](https://support.block64.com/troubleshooting?hsLang=en#discovery-blockbox-appliance) - [Block 64 Discovery Agent](https://support.block64.com/troubleshooting?hsLang=en#block-64-discovery-agent) - [Documentation](https://support.block64.com/documentation?hsLang=en#main-content) - [Insights: Integrations](https://support.block64.com/documentation?hsLang=en#insights-integrations) - [Privacy and Security](https://support.block64.com/documentation?hsLang=en#privacy-and-security) - [Block 64 API](https://support.block64.com/documentation?hsLang=en#block-64-api) - [Discovery: General Knowledge](https://support.block64.com/documentation?hsLang=en#discovery-general-knowledge) - [FAQs](https://support.block64.com/faqs?hsLang=en#main-content) - [Security](https://support.block64.com/faqs?hsLang=en#security) - [Block 64 Discovery](https://support.block64.com/faqs?hsLang=en#block-64-discovery) - [New Features & Updates](https://support.block64.com/new-features-updates?hsLang=en#main-content) - [New Features & Updates](https://support.block64.com/new-features-updates?hsLang=en#new-features-updates) - [Combine](https://support.block64.com/new-features-updates?hsLang=en#combine) - [Block 64 Discovery](https://support.block64.com/new-features-updates?hsLang=en#block-64-discovery) - [Remote Discovery Agent](https://support.block64.com/new-features-updates?hsLang=en#remote-discovery-agent) - [Combine API](https://support.block64.com/new-features-updates?hsLang=en#combine-api) - [BlockBox Virtual Appliance](https://support.block64.com/new-features-updates?hsLang=en#blockbox-virtual-appliance) [![Logomark - dark](https://support.block64.com/hs-fs/hubfs/Logomark%20-%20dark.png?width=60&height=96&name=Logomark%20-%20dark.png "Logomark - dark")](http://block64.com) 300 Geary Ave, Toronto, ON M6H 2C5, Canada +1 800-875-5260 [www.block64.com](https://www.block64.com/)