Log4j - Revision history

Cso at 08:54, 2 September 2024

2024-09-02T08:54:45Z

← Older revision		Revision as of 08:54, 2 September 2024
Line 1:		Line 1:
			Obsolete page

	=Fundsquare’s Response to CVE-2021-44228 Apache Log4j=		=Fundsquare’s Response to CVE-2021-44228 Apache Log4j=

User: /* Fundsquare’s Response to CVE-2021-44228 Apache Log4j */

2022-01-27T10:43:20Z

Fundsquare’s Response to CVE-2021-44228 Apache Log4j

← Older revision		Revision as of 10:43, 27 January 2022
Line 2:		Line 2:


	'''Updated 11 January ~~2021 16~~:00 CET (GMT+1).'''		'''Updated 27 January 2022 12:00 CET (GMT+1).'''

	We will continue to update this page as more information becomes available.		We will continue to update this page as more information becomes available.

User: /* Fundsquare’s Response to CVE-2021-44228 Apache Log4j */

2022-01-27T10:42:53Z

Fundsquare’s Response to CVE-2021-44228 Apache Log4j

← Older revision		Revision as of 10:42, 27 January 2022
Line 34:		Line 34:
	<li><em>Is an update of e-file.lu and its components required?<br /></em>The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it.</li>		<li><em>Is an update of e-file.lu and its components required?<br /></em>The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it.</li>

	<li><em>Is the Sending Service impacted?<br /></em>The Sending Service does not use the impacted library version. As a consequence no action is required from our end or your end. To be even more specific, we use an alternative version of Log4j 1.X which has been furnished by Atlassian and which does not contain this vulnerability. ~~<a href="~~https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-s-Response-to-Log4j-CVE-2021-44228/ba-p/1886598~~">https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-s-Response-to-Log4j-CVE-2021-44228/ba-p/1886598</a>~~</li>		<li><em>Is the Sending Service impacted?<br /></em>The Sending Service does not use the impacted library version. As a consequence no action is required from our end or your end. To be even more specific, we use an alternative version of Log4j 1.X which has been furnished by Atlassian and which does not contain this vulnerability. https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-s-Response-to-Log4j-CVE-2021-44228/ba-p/1886598</li>

	<li><em>Have Fundsquare’s suppliers and vendors been impacted by Log4j vulnerability?<br /></em>Fundsquare is engaging with our supply chain to determine if any suppliers or vendors were impacted by this vulnerability.</li>		<li><em>Have Fundsquare’s suppliers and vendors been impacted by Log4j vulnerability?<br /></em>Fundsquare is engaging with our supply chain to determine if any suppliers or vendors were impacted by this vulnerability.</li>

User: /* Fundsquare’s Response to CVE-2021-44228 Apache Log4j */

2022-01-27T10:41:58Z

Fundsquare’s Response to CVE-2021-44228 Apache Log4j

← Older revision		Revision as of 10:41, 27 January 2022
Line 34:		Line 34:
	<li><em>Is an update of e-file.lu and its components required?<br /></em>The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it.</li>		<li><em>Is an update of e-file.lu and its components required?<br /></em>The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it.</li>

	<li><em>Is the Sending Service impacted?<br /></em>The Sending Service does not use the impacted library version. As a consequence no action is required from our end or your end.</li>		<li><em>Is the Sending Service impacted?<br /></em>The Sending Service does not use the impacted library version. As a consequence no action is required from our end or your end. To be even more specific, we use an alternative version of Log4j 1.X which has been furnished by Atlassian and which does not contain this vulnerability. <a href="https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-s-Response-to-Log4j-CVE-2021-44228/ba-p/1886598">https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-s-Response-to-Log4j-CVE-2021-44228/ba-p/1886598</a></li>

	<li><em>Have Fundsquare’s suppliers and vendors been impacted by Log4j vulnerability?<br /></em>Fundsquare is engaging with our supply chain to determine if any suppliers or vendors were impacted by this vulnerability.</li>		<li><em>Have Fundsquare’s suppliers and vendors been impacted by Log4j vulnerability?<br /></em>Fundsquare is engaging with our supply chain to determine if any suppliers or vendors were impacted by this vulnerability.</li>

User: /* Fundsquare’s Response to CVE-2021-44228 Apache Log4j */

2022-01-11T14:49:12Z

Fundsquare’s Response to CVE-2021-44228 Apache Log4j

← Older revision		Revision as of 14:49, 11 January 2022
Line 2:		Line 2:


	'''Updated ~~15 December~~ 2021 17:00 CET (GMT+1).'''		'''Updated 11 January 2021 16:00 CET (GMT+1).'''

	We will continue to update this page as more information becomes available.		We will continue to update this page as more information becomes available.
Line 15:		Line 15:

	At this time, there have been no successful exploits observed in Fundsquare products, solutions or in the Fundsquare environment. This page will be updated on an ongoing basis to reflect most current status.		At this time, there have been no successful exploits observed in Fundsquare products, solutions or in the Fundsquare environment. This page will be updated on an ongoing basis to reflect most current status.

			We put the correct remediation and mitigation actions in place and closely monitoring the systems/network. As the situation still can evolve, we cannot consider the remediation of the vulnerability has been finished. Currently, all possible actions are in place to stay protected against the Log4J threat.

	Fundsquare also plans to provide answers to common questions on this webpage. It should be considered the single source of current, up-to-date, authorized, and accurate information from Fundsquare.		Fundsquare also plans to provide answers to common questions on this webpage. It should be considered the single source of current, up-to-date, authorized, and accurate information from Fundsquare.

User: /* Fundsquare’s Response to CVE-2021-44228 Apache Log4j */

2021-12-15T16:49:31Z

Fundsquare’s Response to CVE-2021-44228 Apache Log4j

← Older revision		Revision as of 16:49, 15 December 2021
Line 2:		Line 2:


	'''Updated 14 December 2021 11:45 CET (GMT+1).'''		'''Updated 15 December 2021 17:00 CET (GMT+1).'''

	We will continue to update this page as more information becomes available.		We will continue to update this page as more information becomes available.
Line 30:		Line 30:
	<li><em>How does Fundsquare protect its environment from potentially affected software?<br /></em>Generally, Fundsquare does not disclose the details of its Cyber Security program. In response to this vulnerability, Fundsquare has followed the recommendations from Apache and local Cybersecurity and Infrastructure Agencies. These actions also include patching and increased monitoring. Our security team and partners work hard to protect Fundsquare.</li>		<li><em>How does Fundsquare protect its environment from potentially affected software?<br /></em>Generally, Fundsquare does not disclose the details of its Cyber Security program. In response to this vulnerability, Fundsquare has followed the recommendations from Apache and local Cybersecurity and Infrastructure Agencies. These actions also include patching and increased monitoring. Our security team and partners work hard to protect Fundsquare.</li>

	<li><em>Is an update of e-file.lu and its components required?<br /></em>The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it. A separate information would be issued in case of a necessary update of the sending service that may run locally at our clients. At this moment of the release of this information, no update is scheduled.</li>		<li><em>Is an update of e-file.lu and its components required?<br /></em>The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it.</li>

	<li><em>Is the Sending Service impacted?<br /></em>The Sending Service does not use the impacted library version. As a consequence no action is required from our end or your end.</li>		<li><em>Is the Sending Service impacted?<br /></em>The Sending Service does not use the impacted library version. As a consequence no action is required from our end or your end.</li>

User at 14:49, 15 December 2021

2021-12-15T14:49:06Z

← Older revision		Revision as of 14:49, 15 December 2021
Line 21:		Line 21:
	<ul>		<ul>
	<li>⁠<em>Are Fundsquare products affected by the Log4j vulnerability? Which Products were affected?<br /></em>The moment we received an alert, our security team immediately took the necessary action to analyse the impact of this finding over our organization and solutions. Patching of potentially impacted components has started and we follow the guidelines of experts to mitigate the risk and vulnerability caused by this security issue.</li>		<li>⁠<em>Are Fundsquare products affected by the Log4j vulnerability? Which Products were affected?<br /></em>The moment we received an alert, our security team immediately took the necessary action to analyse the impact of this finding over our organization and solutions. Patching of potentially impacted components has started and we follow the guidelines of experts to mitigate the risk and vulnerability caused by this security issue.</li>

	<li><em>What remediation actions have been taken?<br /></em>All Fundsquare products, software and infrastructure are being evaluated and countermeasures have been or are going to be implemented for protection.</li>		<li><em>What remediation actions have been taken?<br /></em>All Fundsquare products, software and infrastructure are being evaluated and countermeasures have been or are going to be implemented for protection.</li>

	<li><em>Will this incident impact or interrupt the delivery of Fundsquare products and services?<br /></em>At this time, we are not anticipating any service disruptions for any Fundsquare products or services.</li>		<li><em>Will this incident impact or interrupt the delivery of Fundsquare products and services?<br /></em>At this time, we are not anticipating any service disruptions for any Fundsquare products or services.</li>

	<li><em>What is the impact to Fundsquare’s business?<br /></em>There is no impact to Fundsquare’s business at this time.</li>		<li><em>What is the impact to Fundsquare’s business?<br /></em>There is no impact to Fundsquare’s business at this time.</li>

	<li><em>How does Fundsquare protect its environment from potentially affected software?<br /></em>Generally, Fundsquare does not disclose the details of its Cyber Security program. In response to this vulnerability, Fundsquare has followed the recommendations from Apache and local Cybersecurity and Infrastructure Agencies. These actions also include patching and increased monitoring. Our security team and partners work hard to protect Fundsquare.</li>		<li><em>How does Fundsquare protect its environment from potentially affected software?<br /></em>Generally, Fundsquare does not disclose the details of its Cyber Security program. In response to this vulnerability, Fundsquare has followed the recommendations from Apache and local Cybersecurity and Infrastructure Agencies. These actions also include patching and increased monitoring. Our security team and partners work hard to protect Fundsquare.</li>

	<li><em>Is an update of e-file.lu and its components required?<br /></em>The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it. A separate information would be issued in case of a necessary update of the sending service that may run locally at our clients. At this moment of the release of this information, no update is scheduled.</li>		<li><em>Is an update of e-file.lu and its components required?<br /></em>The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it. A separate information would be issued in case of a necessary update of the sending service that may run locally at our clients. At this moment of the release of this information, no update is scheduled.</li>

			<li><em>Is the Sending Service impacted?<br /></em>The Sending Service does not use the impacted library version. As a consequence no action is required from our end or your end.</li>

	<li><em>Have Fundsquare’s suppliers and vendors been impacted by Log4j vulnerability?<br /></em>Fundsquare is engaging with our supply chain to determine if any suppliers or vendors were impacted by this vulnerability.</li>		<li><em>Have Fundsquare’s suppliers and vendors been impacted by Log4j vulnerability?<br /></em>Fundsquare is engaging with our supply chain to determine if any suppliers or vendors were impacted by this vulnerability.</li>
	</ul>		</ul>

	Should you require additional information, please do not hesitate to contact our Client Service and Operations Desk at '''[mailto:cso.desk@fundsquare.net cso.desk@fundsquare.net]'''		Should you require additional information, please do not hesitate to contact our Client Service and Operations Desk at '''[mailto:cso.desk@fundsquare.net cso.desk@fundsquare.net]'''

User: /* Fundsquare’s Response to CVE-2021-44228 Apache Log4j */

2021-12-14T10:51:48Z

Fundsquare’s Response to CVE-2021-44228 Apache Log4j

← Older revision		Revision as of 10:51, 14 December 2021
Line 2:		Line 2:


	'''Updated 14 December 2021 07:00 CET (GMT+1).'''		'''Updated 14 December 2021 11:45 CET (GMT+1).'''

	We will continue to update this page as more information becomes available.		We will continue to update this page as more information becomes available.
Line 18:		Line 18:
	Fundsquare also plans to provide answers to common questions on this webpage. It should be considered the single source of current, up-to-date, authorized, and accurate information from Fundsquare.		Fundsquare also plans to provide answers to common questions on this webpage. It should be considered the single source of current, up-to-date, authorized, and accurate information from Fundsquare.

	'''Frequently Asked Questions ~~(Updated December 14, 2021 - 11:45 CET)~~'''		'''Frequently Asked Questions'''
	<ul>		<ul>
	<li>⁠<em>Are Fundsquare products affected by the Log4j vulnerability? Which Products were affected?<br /></em>The moment we received an alert, our security team immediately took the necessary action to analyse the impact of this finding over our organization and solutions. Patching of potentially impacted components has started and we follow the guidelines of experts to mitigate the risk and vulnerability caused by this security issue.</li>		<li>⁠<em>Are Fundsquare products affected by the Log4j vulnerability? Which Products were affected?<br /></em>The moment we received an alert, our security team immediately took the necessary action to analyse the impact of this finding over our organization and solutions. Patching of potentially impacted components has started and we follow the guidelines of experts to mitigate the risk and vulnerability caused by this security issue.</li>

User: /* Fundsquare’s Response to CVE-2021-44228 Apache Log4j */

2021-12-14T10:51:00Z

Fundsquare’s Response to CVE-2021-44228 Apache Log4j

← Older revision		Revision as of 10:51, 14 December 2021
Line 20:		Line 20:
	'''Frequently Asked Questions (Updated December 14, 2021 - 11:45 CET)'''		'''Frequently Asked Questions (Updated December 14, 2021 - 11:45 CET)'''
	<ul>		<ul>
	<li>⁠<em>Are Fundsquare products affected by the Log4j vulnerability? Which Products were affected? </em>The moment we received an alert, our security team immediately took the necessary action to analyse the impact of this finding over our organization and solutions. Patching of potentially impacted components has started and we follow the guidelines of experts to mitigate the risk and vulnerability caused by this security issue.</li>		<li>⁠<em>Are Fundsquare products affected by the Log4j vulnerability? Which Products were affected?<br /></em>The moment we received an alert, our security team immediately took the necessary action to analyse the impact of this finding over our organization and solutions. Patching of potentially impacted components has started and we follow the guidelines of experts to mitigate the risk and vulnerability caused by this security issue.</li>
	<li><em>What remediation actions have been taken? </em>All Fundsquare products, software and infrastructure are being evaluated and countermeasures have been or are going to be implemented for protection.</li>		<li><em>What remediation actions have been taken?<br /></em>All Fundsquare products, software and infrastructure are being evaluated and countermeasures have been or are going to be implemented for protection.</li>
	<li><em>Will this incident impact or interrupt the delivery of Fundsquare products and services? </em>At this time, we are not anticipating any service disruptions for any Fundsquare products or services.</li>		<li><em>Will this incident impact or interrupt the delivery of Fundsquare products and services?<br /></em>At this time, we are not anticipating any service disruptions for any Fundsquare products or services.</li>
	<li><em>What is the impact to Fundsquare’s business? </em>There is no impact to Fundsquare’s business at this time.</li>		<li><em>What is the impact to Fundsquare’s business?<br /></em>There is no impact to Fundsquare’s business at this time.</li>
	<li><em>How does Fundsquare protect its environment from potentially affected software? </em>Generally, Fundsquare does not disclose the details of its Cyber Security program. In response to this vulnerability, Fundsquare has followed the recommendations from Apache and local Cybersecurity and Infrastructure Agencies. These actions also include patching and increased monitoring. Our security team and partners work hard to protect Fundsquare.</li>		<li><em>How does Fundsquare protect its environment from potentially affected software?<br /></em>Generally, Fundsquare does not disclose the details of its Cyber Security program. In response to this vulnerability, Fundsquare has followed the recommendations from Apache and local Cybersecurity and Infrastructure Agencies. These actions also include patching and increased monitoring. Our security team and partners work hard to protect Fundsquare.</li>
	<li><em>Is an update of e-file.lu and its components required? </em>The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it. A separate information would be issued in case of a necessary update of the sending service that may run locally at our clients. At this moment of the release of this information, no update is scheduled.</li>		<li><em>Is an update of e-file.lu and its components required?<br /></em>The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it. A separate information would be issued in case of a necessary update of the sending service that may run locally at our clients. At this moment of the release of this information, no update is scheduled.</li>
	<li><em>Have Fundsquare’s suppliers and vendors been impacted by Log4j vulnerability? </em>Fundsquare is engaging with our supply chain to determine if any suppliers or vendors were impacted by this vulnerability.</li>		<li><em>Have Fundsquare’s suppliers and vendors been impacted by Log4j vulnerability?<br /></em>Fundsquare is engaging with our supply chain to determine if any suppliers or vendors were impacted by this vulnerability.</li>
	</ul>		</ul>

	Should you require additional information, please do not hesitate to contact our Client Service and Operations Desk at '''[mailto:cso.desk@fundsquare.net cso.desk@fundsquare.net]'''		Should you require additional information, please do not hesitate to contact our Client Service and Operations Desk at '''[mailto:cso.desk@fundsquare.net cso.desk@fundsquare.net]'''

User: /* Fundsquare’s Response to CVE-2021-44228 Apache Log4j */

2021-12-14T10:49:37Z

Fundsquare’s Response to CVE-2021-44228 Apache Log4j

← Older revision		Revision as of 10:49, 14 December 2021
Line 19:		Line 19:

	'''Frequently Asked Questions (Updated December 14, 2021 - 11:45 CET)'''		'''Frequently Asked Questions (Updated December 14, 2021 - 11:45 CET)'''
	<li>~~⁠Are~~ Fundsquare products affected by the Log4j vulnerability? Which Products were affected? <br />The moment we received an alert, our security team immediately took the necessary action to analyse the impact of this finding over our organization and solutions. Patching of potentially impacted components has started and we follow the guidelines of experts to mitigate the risk and vulnerability caused by this security issue.</li>		<ul>
	<li>What remediation actions have been taken?<br />All Fundsquare products, software and infrastructure are being evaluated and countermeasures have been or are going to be implemented for protection.</li>		<li>⁠<em>Are Fundsquare products affected by the Log4j vulnerability? Which Products were affected? </em>The moment we received an alert, our security team immediately took the necessary action to analyse the impact of this finding over our organization and solutions. Patching of potentially impacted components has started and we follow the guidelines of experts to mitigate the risk and vulnerability caused by this security issue.</li>
	<li>Will this incident impact or interrupt the delivery of Fundsquare products and services?<br />At this time, we are not anticipating any service disruptions for any Fundsquare products or services.</li>		<li><em>What remediation actions have been taken? </em>All Fundsquare products, software and infrastructure are being evaluated and countermeasures have been or are going to be implemented for protection.</li>
	<li>What is the impact to Fundsquare’s business? <br />There is no impact to Fundsquare’s business at this time.</li>		<li><em>Will this incident impact or interrupt the delivery of Fundsquare products and services? </em>At this time, we are not anticipating any service disruptions for any Fundsquare products or services.</li>
	<li>How does Fundsquare protect its environment from potentially affected software?<br />Generally, Fundsquare does not disclose the details of its Cyber Security program. In response to this vulnerability, Fundsquare has followed the recommendations from Apache and local Cybersecurity and Infrastructure Agencies. These actions also include patching and increased monitoring. Our security team and partners work hard to protect Fundsquare.</li>		<li><em>What is the impact to Fundsquare’s business? </em>There is no impact to Fundsquare’s business at this time.</li>
	<li>Is an update of e-file.lu and its components required?<br />The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it. A separate information would be issued in case of a necessary update of the sending service that may run locally at our clients. At this moment of the release of this information, no update is scheduled.</li>		<li><em>How does Fundsquare protect its environment from potentially affected software? </em>Generally, Fundsquare does not disclose the details of its Cyber Security program. In response to this vulnerability, Fundsquare has followed the recommendations from Apache and local Cybersecurity and Infrastructure Agencies. These actions also include patching and increased monitoring. Our security team and partners work hard to protect Fundsquare.</li>
	<li>Have Fundsquare’s suppliers and vendors been impacted by Log4j vulnerability?<br />Fundsquare is engaging with our supply chain to determine if any suppliers or vendors were impacted by this vulnerability.</li>		<li><em>Is an update of e-file.lu and its components required? </em>The advantage of e-file.lu is its deployment online through our website. In case of a required update due to a patch, we can manage this update from our back end and the next time you load the page, the patched version will be loaded. This would also be the case for the transmission module that constantly checks for updates when you launch it. A separate information would be issued in case of a necessary update of the sending service that may run locally at our clients. At this moment of the release of this information, no update is scheduled.</li>
			<li><em>Have Fundsquare’s suppliers and vendors been impacted by Log4j vulnerability? </em>Fundsquare is engaging with our supply chain to determine if any suppliers or vendors were impacted by this vulnerability.</li>
	</ul>		</ul>

	Should you require additional information, please do not hesitate to contact our Client Service and Operations Desk at '''[mailto:cso.desk@fundsquare.net cso.desk@fundsquare.net]'''		Should you require additional information, please do not hesitate to contact our Client Service and Operations Desk at '''[mailto:cso.desk@fundsquare.net cso.desk@fundsquare.net]'''