Critical security vulnerability code-named “Log4Shell” (tracked as CVE-2021-44228)

Kafka Connect Managed Connectors
1

Does the below critical security vulnerability code-named “Log4Shell” (tracked as CVE-2021-44228) impact our Kafka Connector application using kafka_2.12-2.2.2 and log4j-1.2.17.jar?

2

Hi,

Please see this support note: https://support.confluent.io/hc/en-us/articles/4412615410580-CVE-2021-44228-log4j2-vulnerability. It’s publicly accessible - no support account required.

3

Thanks for responding, will the Confluent Kafka connector work with log4j version 2.16 at all?

4

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.