All Collections
Settings
Features
Securing against Apache Log4j vulnerability
Securing against Apache Log4j vulnerability

TinQwise is well aware of the recent high risk security vulnerability CVE-2021-44228, also known as the Apache Log4j vulnerability.

Emil de Valk avatar
Written by Emil de Valk
Updated over a week ago

The security of digital platforms is paramount, especially in light of vulnerabilities that arise in commonly used software components. One such example is the Apache Log4j vulnerability, a significant security concern that has affected various applications. This vulnerability is known to primarily affect older Java runtimes, including web front ends for network appliances and application environments using legacy APIs that haven't been upgraded.

Your TinQwise Growth platform is not impacted by this vulnerability.

TinQwise Growth Platform does not utilise Java directly, which means it is not directly affected by vulnerabilities like the Apache Log4j. We do incorporate a component named 'Elastic Search' to power our search engine. Elastic Search does use Java, but importantly, it does not include the impacted logging component associated with this specific vulnerability. Additionally, Elastic Search is implemented in a fully authenticated environment and is not exposed externally, ensuring an added layer of security.

The security landscape is continually evolving, and at TinQwise, we stay vigilant, ensuring our platforms are not only advanced in their functionality but also secure and reliable. We are committed to providing a safe and secure experience for all our users.



Did this answer your question?