LOG4J v2 Security Vulnerability issue impact on Attraqt products and follow up actions - Completed

Attraqt is aware of the recently disclosed issues relating to the open-source Apache “Log4j2" utility (CVE-2021-44228 and CVE-2021-45046) and has prioritised all internal checks on products and services we offer to ensure stability and robustness.

Since we became aware of this particular issue we have already taken a number of steps to mitigate and address this particular threat and have extended plans to continue to patch our services.

The following services were verified regarding possible impacts:

 

Service	Impact
Insights Reporting Tool (Including CIDP and CADP services)	No impact and no changes required
FHR Core	No impact and no changes required
FHR Cloud Logging Service	Impact identified, service patched, and operational
FHR Configuration Rules Engine	Impact identified, patches currently being deployed across all Test and Live environments. No expected downtime of the service.  Some customers may notice a short delay in data processing (estimated delay is up to 20 minutes).
XO Product	Fixes patched and deployed successfully

 

Our highest priority is to ensure a secure and smooth holiday trading season for our customers– our engineers are currently busy deploying patches to the FHR Configuration Rules Engine Service across our entire base. We are expecting this activity to be completed by the end of Monday 20^th December with no anticipated impact to our customers during this time (apart from a potential slight delay in feed processing which could be up to 20 min).

Our Support team will be available to assist you with any questions or issues during this operation. To contact Support, please log a ticket with us.