Aptible: Log4j security incident CVE-2021-44228
No impact listedStatus: resolvedStarted Resolved (7.5 h)1 updatestatus.aptible.com (opens in new tab)
Timeline of updates
- resolved
We have now patched and restarted all Elasticsearch databases running on Aptible. For versions that don't support "log4j2.formatMsgNoLookups=true", we have removed the affected JndiLookup class. In addition, we have completed our review of all Aptible infrastructure and have determined that these Elasticsearch databases are the only vulnerable components. That said, we continue to strongly recommend that all customers review their own infrastructure for any Java apps or dependencies.
From Aptible’s published incident history: for incidents before Rewindex began polling this status page, only the final update text is available.
Impact, status and times are the vendor’s own, as last archived. View on status.aptible.com (opens in new tab).