Late last week NCSC reported that it’s aware of a remote code execution vulnerability affecting the Java logging library Apache Log4J, that has been assigned CVE-2021-44228.
The Java logging tools are used in many applications the world over, including ones that make up the Chorus Intelligence Suite.
We are in the process of fully reviewing the impact on our products, however, initial results indicate that there is a very low risk of this exploit being serviceable in any Chorus products as the architecture of the software is not internet facing and users are not able to input any code or logs directly into the applications.
For assistance or any questions with anything relating to Chorus then please contact our support team.
020 3597 7350
[email protected]
