Security: FLOWSTER Products Not Affected by "Log4j" Vulnerability

Since December 10, 2021, the Federal Office for Information Security (BSI) has issued a red warning level for the security vulnerability CVE-2021-44228, also known as "Log4j". "Log4j" is a widely used library for Java applications. The vulnerability enables remote execution through log data.

Here you can find the current information from the BSI.

Affected Versions of Log4j

CVE-2021-44228 affects Log4j versions up to 2.14.1. In Log4j version 2.15.0, the behavior was removed by default.

CVE-2021-45105 affects Log4j2 versions 2.0-alpha 1 to 2.16.0 (except 2.12.3). This issue was fixed in Log4j 2.17.0 and 2.12.3.

Impact on FLOWSTER Products

An analysis by our security experts revealed that the FLOWSTER Studio automation platform is not affected by the vulnerability.

Our software is based on the Microsoft .NET Framework and therefore does not use Java libraries.

This means that the security of your infrastructure and networks continues to be guaranteed for all customers.