[ad_1]
Over the previous few days you might have heard about Log4j and a significant vulnerability that allowed hackers to assault unpatched Apache servers – if not, click on right here to study extra. Google has posted that Google Adverts and Google Advertising and marketing Platform should not utilizing variations of Log4j affected by the CVE-2021-44228 vulnerability.
Google defined that on On December 10, 2021, the Nationwide Institute of Requirements and Know-how (NIST) introduced a latest vulnerability (CVE-2021-44228) within the Apache Log4j library. The Apache Log4j utility is a generally used element for logging requests. This vulnerability might enable a system working Apache Log4j model 2.14.1 or under to be compromised and permit arbitrary code to be executed.
Google stated that it’s “following this vulnerability intently.” Google stated its “safety groups are investigating any potential impression on Google services and products and are targeted on defending our customers and prospects.” However particular to Google Adverts, Google stated the corporate is “not utilizing variations of Log4j affected by the CVE-2021-44228 vulnerability.”
Google additionally posted on the Google Adverts Developer weblog “if you’re utilizing an Adverts API Consumer Library and Apache Log4j variations 2.0 to 2.14.1, please improve to the patched model 2.15.0 launched by Apache as indicated within the Apache Log4j Safety Vulnerabilities web site.“
You must also make certain the software program you employ and or constructed is just not susceptible.
Discussion board dialogue at Twitter.
[ad_2]
