google / earthenterprise

Google Earth Enterprise - Open Source
Apache License 2.0
2.67k stars 890 forks source link

CVE-2021-44228 security advisory #1984

Open avnishb opened 2 years ago

avnishb commented 2 years ago

Please confirm whether Google Earth Enterprise is affected by the CVE-2021-44228 Apache Log4j 2 vulnerability. If so, post Security Advisory.

avnishb commented 2 years ago

The Google Earth Enterprise Client (EC) does not incorporate a Java stack, and therefore should not be directly susceptible to the log4j vulnerability.