Log4j Vulnerability

Trouble seeing the images? Right click on images and open in new tab to enlarge or zoom in on the page (Ctrl + mousewheel).

In this article we want to address the concerns regarding BridgeWorks applications and the impact of the Log4j vulnerability. For more information on the Log4j vulnerability, click here.

What is the Log4j vulnerability?

Problem: The Log4j vulnerability discovered on December 9, 2021, is a serious vulnerability that affects many software products and online services by allowing an unauthenticated body to execute code on systems that have this library deployed.

How does this vulnerability affect BridgeWorks?

Answer: In regard to the Log4j vulnerability we can confirm that BridgeWorks does not use Log4j in the current versions of our applications, including BridgeWorks VDM, Ontario Reports and WebReports.