Update on the recent Apache Log4j2 vulnerabilities - Impact on Zoho Analytics On Premise Deployments
Dear Users,
Three high severity vulnerabilities (CVE- 2021-44228, CVE-2021-45105 and CVE-2021-45046), impacting multiple versions of Apache Log4j utility, was disclosed publicly on December 9, 2021. We have found no evidence of any successful exploitation in Zoho Analytics On Premise software as of today. We are continuing to analyse the issue and will provide updates of any new findings.
However the affected log4j version is present within Zoho Analytics On Premise as a bundled dependency, hence we strongly recommend all our customers to follow the below steps as a precautionary measure:
Linux users:
- Open a terminal and navigate to "Analytics/lib/".
- Execute the command "zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class".
- Restart Zoho Analytics On Premise service.
Windows users:
Note: These vulnerabilities will be fixed in Zoho Analytics On Premise from build 5070 (upcoming). The above steps are applicable only if your Zoho Analytics On Premise is on build 5000, 5010, 5020, 5030, 5050, and 5060. The rest of the Zoho Analytics On Premise builds are not affected.
Important Note: Zoho Analytics cloud service is also not affected by these vulnerabilities. Please refer to this link for more details on this.
Last updated on : 22nd Dec 2021 09:15 GMT
Sticky Posts
[Customer Talk] PREMO Group's Analyst Interview at Zoho Day 2022
Premo Group, a 50 year old Spanish Manufacturing Company, has been our long-standing customer with #ZohoAnalytics. They've been using our platform for their end-to-end, unified business analytics solution. Hear more from Claudio Cabeza, Director at PREMO
Announcing Zoho Analytics 5.0 -- A Modern Self-service BI & Analytics Platform
We are extremely delighted to unveil Zoho Analytics 5.0 - A Modern Self-service BI and Analytics platform to the public. Experience analytics like never before with the following new capabilities and enhancements: Comprehensive AI-Powered Data Preparation
Zoho Analytics | Quarterly Newsletter | Q2 2022
Hello Everyone! I hope all of you are safe and well! Zoho Analytics - Q2 Quarterly Newsletter is out now! Check out the newsletter (attachment) to know all about our new features, recognitions, webinars, blogs, and many more exciting things. Do let us
Zoho Analytics: 2021 Look Back
As we start a new year in 2022, here's some of our top moments from 2021. Zoho Analytics in 2021
Update on the recent Apache Log4j2 vulnerabilities - Impact on Zoho Analytics On Premise Deployments
Dear Users, Three high severity vulnerabilities (CVE- 2021-44228, CVE-2021-45105 and CVE-2021-45046), impacting multiple versions of Apache Log4j utility, was disclosed publicly on December 9, 2021. We have found no evidence of any successful exploitation
Zoho CRM Plus Resources
Zoho Books Resources
Zoho Subscriptions Resources
Zoho Desk Resources
Zoho Projects Resources
Zoho Sprints Resources
Zoho Orchestly Resources
Zoho Creator Resources
Zoho WorkDrive Resources
Zoho Campaigns Resources
Zoho CRM Resources
Writer Get Started. Write Away!
Writer is a powerful online word processor, designed for collaborative work.