# Aptible: Log4j security incident CVE-2021-44228

- Impact (vendor’s label): none
- Status: resolved
- Started: 2021-12-10 21:49 UTC · Resolved: 2021-12-11 05:16 UTC · Duration: 7.5 h
- Updates: 1
- [Vendor status page: https://status.aptible.com/incidents/gk1rh440h36s](https://status.aptible.com/incidents/gk1rh440h36s)
- [Company: Aptible](https://rewindex.com/company/aptible.md)

## Timeline of updates

- **resolved** 2021-12-11 05:16 UTC: We have now patched and restarted all Elasticsearch databases running on Aptible. For versions that don't support "log4j2.formatMsgNoLookups=true", we have removed the affected JndiLookup class. In addition, we have completed our review of all Aptible infrastructure and have determined that these Elasticsearch databases are the only vulnerable components. That said, we continue to strongly recommend that all customers review their own infrastructure for any Java apps or dependencies.

_From the vendor’s published history: only the final update text is available for incidents before Rewindex began polling this page._


---
Canonical: https://rewindex.com/company/aptible/incidents/gk1rh440h36s · Markdown: https://rewindex.com/company/aptible/incidents/gk1rh440h36s.md · JSON: https://rewindex.com/api/v1/companies/aptible/incidents/gk1rh440h36s · Generated 2026-10-20T00:15:00.703Z