Apache Log4j vulnerability on JIRA Software v8.8.0

[Tan Mok Kooi]

Hi all,

I'm using JIRA software v8.8.0, I would like to know whether there's any threat of the
Apache Log4j vulnerability on JIRA Software v8.8.0?

My JIRA web address is in the form "http://10.xxx.x.xxx:xxxx/secure/Dashboard.jspa",

I suppose I don't use cloud server..

in that case, is there any threat of this Log4j vulnerability ?
can anyone help me ?

Regards,

[Vishwas]

Hi @Tan Mok Kooi 

Welcome to Atlassian Community !!

Jira Software Self Hosted is not affected by this vulnerability.

Bitbucket server/Data Centre is the affected product by this CVE.

Please go through this link to find out more https://confluence.atlassian.com/security/multiple-products-security-advisory-log4j-vulnerable-to-remote-code-execution-cve-2021-44228-1103069934.html

Regards,

Vishwas