Log4j

[Perry21]

Mr. Ms. As you may have already heard, a vulnerability called Log4j has been discovered. We are busy asking suppliers (organizations) whether their software contains vulnerabilities, so that we can patch the software.

My question is, does your software contain vulnerabilities? If so, do you have a patch that can be installed? I look forward to your response.

[SeanGaines]

@Perry21 Thank you for posting this question to the Zoom Community! 

Zoom has applied Apache’s recommended mitigations. We are in the process of patching any systems with vulnerable versions of Log4j identified to date to Log4j version 2.16.0.

No action is required by users at this time.

We are maintaining a dedicated page on our response to the Log4j vulnerability on our Zoom Security Bulletin.

We will continue to keep this page updated as material information becomes available. You can find the page at https://explore.zoom.us/en/trust/security/security-bulletin/security-bulletin-log4j/

Please see the latest information using the link above. 

If this answers your questions please mark this post as answered and if you have further questions we are happy to help. 

All best, 

Sean

[MokiBandit]

What is Log4j? Will it mess with my zoom? How does it make zoom vulnerable?