QAS Patch for Log4j Security Vulnerabilities is now Available!
What's the issue?
The global security vulnerabilities (CVE-2021-44228 and CVE-2021-45046) were reported with Log4j versions <=2.14.1. Log4j is a commonly used logging framework for Java applications. Qualitia Automation Studio versions 8.0 and later used the Log4j version 2.13.1.
How's it fixed?
The security vulnerability issues have been fixed in Log4j versions 2.15.0 and 2.16.0. Qualitia has included 2.16.0 version of Log4j in the latest patches for Qualitia Automation Studio 8.0 and later.
You are advised to do the following immediately for your Qualitia Automation Studio version:
Download the patch and install it.
Update all the existing offline packages.
For any queries, contact Qualitia Customer Support.