# Critical security vulnerability code-named “Log4Shell” (tracked as CVE-2021-44228)

**URL:** <https://forum.confluent.io/t/critical-security-vulnerability-code-named-log4shell-tracked-as-cve-2021-44228/3646>\
**Category:** Managed Connectors\
**Created:** [13 December 2021 20:20 UTC](https://forum.confluent.io/t/critical-security-vulnerability-code-named-log4shell-tracked-as-cve-2021-44228/3646 "2021-12-13T20:20:11Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![rlinapagolla](https://avatars.discourse-cdn.com/v4/letter/r/54ee81/32.png) [@rlinapagolla](https://forum.confluent.io/u/rlinapagolla)\
**Post date:** [13 December 2021 20:20 UTC](https://forum.confluent.io/t/critical-security-vulnerability-code-named-log4shell-tracked-as-cve-2021-44228/3646/1 "2021-12-13T20:20:11Z")

</div>

Does the below critical security vulnerability code-named “Log4Shell” (tracked as CVE-2021-44228) impact our Kafka Connector application using kafka\_2.12-2.2.2 and log4j-1.2.17.jar?

---

<div class="post-metadata">

**Author:** ![rmoff](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.confluent.io/rmoff/32/3_2.png) [@rmoff](https://forum.confluent.io/u/rmoff)\
**Post date:** [14 December 2021 09:26 UTC](https://forum.confluent.io/t/critical-security-vulnerability-code-named-log4shell-tracked-as-cve-2021-44228/3646/2 "2021-12-14T09:26:26Z")

</div>

Hi,

Please see this support note: [https://support.confluent.io/hc/en-us/articles/4412615410580-CVE-2021-44228-log4j2-vulnerability](https://support.confluent.io/hc/en-us/articles/4412615410580-CVE-2021-44228-log4j2-vulnerability). It’s publicly accessible - no support account required.

---

<div class="post-metadata">

**Author:** ![rlinapagolla](https://avatars.discourse-cdn.com/v4/letter/r/54ee81/32.png) [@rlinapagolla](https://forum.confluent.io/u/rlinapagolla)\
**Post date:** [21 December 2021 14:12 UTC](https://forum.confluent.io/t/critical-security-vulnerability-code-named-log4shell-tracked-as-cve-2021-44228/3646/3 "2021-12-21T14:12:48Z")

</div>

Thanks for responding, will the Confluent Kafka connector work with log4j version 2.16 at all?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex019/uploads/confluentcommunity/original/1X/c49438c90c9df282e9996fdf6971be890c71b65a.svg) [@system](https://forum.confluent.io/u/system)\
**Post date:** [28 December 2021 14:12 UTC](https://forum.confluent.io/t/critical-security-vulnerability-code-named-log4shell-tracked-as-cve-2021-44228/3646/4 "2021-12-28T14:12:58Z")

</div>

Closed on 28 December 2021 14:12 UTC

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.