# Zero-day exploit for Log4j

**URL:** <https://support.openanalytics.eu/t/zero-day-exploit-for-log4j/2104>\
**Category:** ShinyProxy\
**Created:** [December 11, 2021, 4:36pm UTC](https://support.openanalytics.eu/t/zero-day-exploit-for-log4j/2104 "2021-12-11T16:36:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ahorn](https://support.openanalytics.eu/user_avatar/support.openanalytics.eu/ahorn/32/630_2.png) [@ahorn](https://support.openanalytics.eu/u/ahorn)\
**Post date:** [December 11, 2021, 4:36pm UTC](https://support.openanalytics.eu/t/zero-day-exploit-for-log4j/2104/1 "2021-12-11T16:36:11Z")

</div>

Hi,  
I have seen, that shinyproxy ist using the log4j library. Is it affected by the zero.day exploit

> **[New zero-day exploit for Log4j Java library is an enterprise nightmare](https://www.bleepingcomputer.com/news/security/new-zero-day-exploit-for-log4j-java-library-is-an-enterprise-nightmare/)**
>
> Proof-of-concept exploits for a critical zero-day vulnerability in the ubiquitous Apache Log4j Java-based logging library are currently being shared online, exposing home users and enterprises alike to ongoing remote code execution attacks.

  
and what steps are needed for this case?

Thanks,  
Achim

---

<div class="post-metadata">

**Author:** ![tverbeke](https://support.openanalytics.eu/letter_avatar_proxy/v4/letter/t/d9b06d/32.png) [@tverbeke](https://support.openanalytics.eu/u/tverbeke)\
**Post date:** [December 12, 2021, 12:20pm UTC](https://support.openanalytics.eu/t/zero-day-exploit-for-log4j/2104/2 "2021-12-12T12:20:40Z")

</div>

Hi @ahorn

See [https://github.com/openanalytics/shinyproxy/issues/346](https://github.com/openanalytics/shinyproxy/issues/346) for the full picture. In short: ShinyProxy is not affected. The ShinyProxy operator was vulnerable and a new version with a fix has been immediately released ([v1.0.1](https://github.com/openanalytics/shinyproxy-operator/releases/tag/v1.0.1)).

Best,  
Tobias

---

<div class="post-metadata">

**Author:** ![ahorn](https://support.openanalytics.eu/user_avatar/support.openanalytics.eu/ahorn/32/630_2.png) [@ahorn](https://support.openanalytics.eu/u/ahorn)\
**Post date:** [December 12, 2021, 12:54pm UTC](https://support.openanalytics.eu/t/zero-day-exploit-for-log4j/2104/3 "2021-12-12T12:54:32Z")

</div>

Thanks a lot for this quick clarification.