Forum

Author Topic: Log4Shell issues?  (Read 24669 times)

jrp

  • Jr. Member
  • **
  • Posts: 53
    • View Profile
Log4Shell issues?
« on: December 15, 2021, 06:21:07 PM »
Hi,

Could I ask that someone from Agisoft give an official statement confirming whether or not any Agisoft products are affected by the Log4Shell vulnerability.

I need to gather this information for an institutional security review, and I felt it was worth asking here incase it helps anyone else in the same posiiton.

I'm not expecting any issues, but I only use the local network infrastructure not the cloud infrastucture, so I'm not sure what it runs on.

Also, appologies if this is already up here somewhere, I can't find it if it is.

Thanks.

oshee

  • Newbie
  • *
  • Posts: 1
    • View Profile
Re: Log4Shell issues?
« Reply #1 on: December 17, 2021, 07:15:47 PM »
I second the request for some info on this

Alexey Pasumansky

  • Agisoft Technical Support
  • Hero Member
  • *****
  • Posts: 14004
    • View Profile
Re: Log4Shell issues?
« Reply #2 on: December 20, 2021, 07:52:38 PM »
Hello!

Metashape doesn't use Log4J, as Metashape is developed using C++, while Log4J is a Java framework. So the mentioned vulnerability doesn't apply to Metashape software.

There is a separate Metashape Java Library that allows to use Metashape C++ engine from Java, but it also doesn't use Log4J framework.
Best regards,
Alexey Pasumansky,
Agisoft LLC