Apache Log4j Vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) announced a widespread vulnerability known as Apache Log4j. Log4j is widely used in a variety of consumer and enterprise services, websites, and applications. This vulnerability could allow a remote actor to take control of the impacted system/application.

Can you advise if the Apache Log4j vulnerability impacts Comcast Routers and Telephone Systems, and if so, how can we obtain/deploy a patch to mitigate this vulnerability?

I have not seen anything online with regards to this issue.

Any help will be most appreciated!

Responses

CC_Travis

Contributor

•

14 Messages

3 years ago

@user_df4096

This is a new one to me. I am not seeing anything internally referencing Apache Log4j. Also, I do not see any alerts regarding Apache Log4j at our Customer Security Assurance organization site, here - https://comca.st/3GHh5r6

That is the team that I recommend that you reach out to on this. They can be reached at 1-888-565-4329 from 6:00am - 2:00am EST, 7 days a week.

I hope this helps.

2

0

U

user_df4096

New Member

•

2 Messages

@Comcast_Travis Thanks Travis. I will reach out to this team tomorrow morning.

Have a great day!

Like

Reply

3 years ago

0

CC_Travis

Contributor

•

14 Messages

@user_df4096

It is totally my pleasure to assist. I am doing a bit more digging on my end, so, I am going to check in with you, here, in a couple of days.

If you don't mind, please let us know what you find out from CSA.

I no longer work for Comcast.

Like

Reply

3 years ago

0