Raytion Enterprise Search Connectors are not affected by CVE-2021-44228 since they do not use log4j2
All Raytion Enterprise Search Connectors use log4j1 version which is not vulnerable to CVE-2021-44228. We have done additional analysis and a similar vulnerability can only be exploited if all of the following non-default configurations are in place:
There do exist a few CVEs for log4j which all are not affecting our Raytion Enterprise Search Connectors:
It may be worthwhile checking if the connector configuration has been adapted by you.
Please note: Raytion does not deliver any Raytion Enterprise Search Connector product with those non-default settings.
Quick fix:
Linux and Windows command line:
Set -Dlog4j2.formatMsgNoLookups=true as JVM_PARAMS in ext/setenv.(sh|bat)
Windows Service:
Add -Dlog4j2.formatMsgNoLookups=true as procrun parameters
Resolution:
The following additional CVE within log4j2 does not affect Raytion SRI:
CVE-2021-45046: Thread Context Map not used by SRI; pattern not used and not exploitable. Other Context Lookups not part of default SRI log patterns.
Please refer to “Raytion Search & Retrieval Interface”.
Raytion CSM prior to version 7.x is also not vulnerable to CVE-2021-44228 as these versions use log4j version 1. We have done additional analysis and a similar vulnerability can only be exploited if all of the following non-default configurations are in place:
There do exist a few CVEs for log4j which all are not affecting our Raytion CSM
It may be worthwhile checking if the connector configuration has been adapted by you.
Raytion does not deliver any Raytion CSM product with those non-default settings.
The following references may be of further help for you and your IT teams making sure you are protected from attacks against VE-2021-44228.
Update 2021-12-14, 9pm CET via announce@apache.org: log4j2.16.0 fixes another, moderate CVE present in previous versions. Refer to https://logging.apache.org/log4j/2.x/security.html
As a Microsoft Gold Partner, Raytion grows its Microsoft practice and demonstrates proven expertise in delivering quality solutions for collaboration, search and cloud.
This blog article will draw closer what enterprise search is and how the Raytion Search & Retrieval Interface comes into play. Since information is stored differently, the interface shows a good approach to streamline information access.
Covestro employs almost 18,000 people with a variety of roles and responsibilities at more than 50 locations worldwide. To reach colleagues, corporate communication has many channels at its disposal. However, the existing intranet got on in years and could no longer meet the demands of a personalized and modern employee communication. Therefore, as part of its digitalization strategy, Covestro decided to set up a completely new intranet based on Microsoft 365.
