Forum Discussion

Bigjoe910's avatar
Bigjoe910
New member | Level 2
4 years ago
Solved

Log4j Breach

After the discovery of the security breach caused by Log4j on the weekend of December 10-12, 2021. We need to know if your software is vulnerable to this security breach.
  • Walter's avatar
    Walter
    4 years ago

    Hey Bigjoe910 & leksikon - thanks for your patience while we conducted a thorough review of services and components across all Dropbox products.

    We have hardened all instances of log4j that were identified on HelloSign and Dropbox-owned platforms by applying a patch or taking other appropriate action. Like many other service providers, we continue to work with our vendors to assess impact and remediation efforts. Our systems are functioning normally and we are not aware of any active threat.

    I hope this information helps!