CVE-2021-44228 / Log4Shell / log4j vulnerability

Question
1

Is there any component within the privacyidea platform that is subject to the CVE-2021-44228 / Log4Shell / log4j vulnerability?

https://nvd.nist.gov/vuln/detail/CVE-2021-44228

1 Like
2

No. The privacyIDEA server is written in Python.
The only Java component is the keycloak plugin. It does not use this.

2 Likes