SecureSafe und DSwiss nicht von log4j Sicherheitslücke betroffen

Die DSwiss AG verwendet log4j nicht als Standard-Logging-Framework. Somit können wir bestätigen, dass unsere Services (SecureSafe, eSafe-Instanzen und Backend-Services) nicht von der log4j Sicherheitslücke betroffen sind.

DSwiss Status (EN)

When the vulnerability was first disclosed on Friday 10th of December the DSwiss security team immediately assessed the exposure level of all DSwiss services. Over the course of the weekend additional tests were conducted to validate the exposure level of DSwiss.

At this point we can confirm that:

• None of the production services - specially the eSafe instances
• None of the back-end services supporting production services are affected by the log4j vulnerability.

DSwiss does not utilize log4j as a standard logging framework. In case of further questions, please don't hesitate to contact us at Bitte Javascript aktivieren!