x Want to participate? Join the group to interact
Options
  • Replies 11 replies
  • Subscribers 93 subscribers
  • Views 10642 views
  • Users 0 members are here
Browse Forums
Announcements
293
topics
370
replies
Business Object Interface
1k
topics
7k
replies
Core Financial Modules
2k
topics
8k
replies
Customization and Productivity
3k
topics
12k
replies
Distribution, Manufacturing, and Applications
2k
topics
7k
replies
General Discussion
1k
topics
3k
replies
Partner Cloud
45
topics
92
replies
Payroll, Time Tracking, and Job Cost
777
topics
1k
replies
Reporting and Analytics
962
topics
3k
replies
Sage CRM for Sage 100
164
topics
357
replies
Technical and Installation
2k
topics
9k
replies
Year-end Forum
89
topics
237
replies
Mas90Geek

Log4j and Sage 100 vulnerability?

Posted By

Last week a proof of concept for a vulnerability around Log4j was distributed on the Internet.  New zero-day exploit for Log4j Java library is an enterprise nightmare (bleepingcomputer.com) 

Almost immediately bad actors started trying to exploit the vulnerability.  Hackers start pushing malware in worldwide Log4Shell attacks (bleepingcomputer.com) 

Is the Sage 100 server vulnerable to the Log4j vulnerability?  What impact would this have on Sage 100?

Parents

  • We're getting the same questions from customer IT, as news of Log4j spreads. 

    Can Sage prepare a KB article we can share about how Sage 100 is (or hopefully isn't) affected by this vulnerability?

  • in reply to Kevin M

    KB article re: Sage 100: 

    What impact does the Log4j vulnerability have on Sage 100?
    Created on 12-13-2021 | Last modified on 12-14-2021
    Summary
    What impact does the Log4j vulnerability have on Sage 100?
    Is the Sage 100 server vulnerable to the Log4j vulnerability?
    Resolution
      • Sage Engineering has been made aware of the Log4j vulnerability on Friday Dec 10 and is currently researching if there is any affect for Sage 100. While it's unlikely Sage 100 is affected, Sage Engineering is currently researching this and will provide an update when the research is complete.
    Keywords: 
    Product: Sage 100
    Solution ID: 113754
    Published on: 12-14-2021
    Applies to: Download and installation >  Installation
Reply
  • in reply to Kevin M

    KB article re: Sage 100: 

    What impact does the Log4j vulnerability have on Sage 100?
    Created on 12-13-2021 | Last modified on 12-14-2021
    Summary
    What impact does the Log4j vulnerability have on Sage 100?
    Is the Sage 100 server vulnerable to the Log4j vulnerability?
    Resolution
      • Sage Engineering has been made aware of the Log4j vulnerability on Friday Dec 10 and is currently researching if there is any affect for Sage 100. While it's unlikely Sage 100 is affected, Sage Engineering is currently researching this and will provide an update when the research is complete.
    Keywords: 
    Product: Sage 100
    Solution ID: 113754
    Published on: 12-14-2021
    Applies to: Download and installation >  Installation
Children
No Data

*Community Hub is the new name for Sage City