Apache Log4j vulnerability

If you are using an Ads API Client Library and Apache Log4j, please see below.

NIST has announced a recent vulnerability (CVE-2021-44228) in the Apache Log4j library.

The Apache Log4j utility is a commonly used component for logging requests. On December 9, 2021, a vulnerability was reported that could allow a system running Apache Log4j version 2.14.1 or below to be compromised and allow arbitrary code to be executed.

What do you need to do?
If you are using an Ads API Client Library and Apache Log4j versions 2.0 to 2.14.1, please upgrade to the patched version 2.15.0 released by Apache as indicated in the Apache Log4j Security Vulnerabilities website.

If you have any questions or need additional help, contact us through this forum.