Log4j CVE-2021-44228

HI,

Can you update what is the status of PagerDuty, regarding the critical vulnerability in log4j CVE-2021-44228

1 Like

Thank you for raising this, Amir. Our Security team is aware of this vulnerability and are actively working with our Engineering org to investigate, assess, and remediate all areas of impact. We adhere to a strict SLA for vulnerability patching based on the severity of the vulnerability, and any affected systems found would be patched within 24 hours. In the interim we have added extra mitigations at the L4 level in our front end loadbalancers to reduce risk in areas that are currently being mitigated.

Kat Kasianenko

Hi,

Any update? can you please give us details regarding the status of PagerDuty in that issue?

1 Like