Cloud Computing Dangers

As soon as the vulnerability was discovered, HostRooster cloud-delivered patches or mitigation. Cases:

  • Customers’ systems are insecure. We can’t detect the issue because we don’t access customer systems. Our customers should follow the rules.
  • The vulnerability impacts a client production system. These systems are our primary focus.
  • Internal systems, not services, are vulnerable. Editor feedback helps us focus on important initiatives.

We hunt for Log4j flaws. We’ll update the status of our investigations as warranted.

Product

Investigation results

Update 22/12

CVE-2021-45105

CVE-2021-45046

Recommendation

Status

Dedicated Servers

These items employ no vulnerable Log4j.

N/A

Following these suggestions, we encourage our clients to check their server setups.

Storage and Backups

These items employ no vulnerable Log4j.

N/A

N/A

Nutanix

The vulnerability affects Nutanix products. HostRooster cloud’s platform is susceptible. Once the infrastructure is delivered, HostRooster cloud cannot check the platform.

Customers have helped implement network-level mitigations.

N/A

Customers should follow editors’ Nutanix infrastructure recommendations (See link below)

Following the suggestions above, we encourage our clients to evaluate their virtual machine setups.

We advocate limiting susceptible service network exposure.

Logs Data Platform

This platform was running an insecure version of Log4j. All potentially vulnerable versions have been fixed.

All clients have Log4J 2.17.0.

N/A

Hosted Private Cloud powered by VMware

Vulnerability affects VMware products. VMware published workarounds for affected products.

Our infrastructure has workarounds. These workarounds may affect production systems, so we’re using our change management approach.

By default, only customer-defined IP addresses can access administration interfaces. Exposed susceptible systems are restricted.

For the new vulnerabilities, workarounds are being put in place.

Following the aforementioned suggestions, we encourage our clients to evaluate their virtual machine setups.

Our customers should limit the ACL to trusted IP addresses.

Veeam, Zerto

These items employ no vulnerable Log4j.

N/A

N/A

Hosted Private Cloud powered by Anthos

These items employ no vulnerable Log4j.

N/A

N/A

Public Cloud Instance, Object storage, Block storage, VPS

These items employ no vulnerable Log4j.

N/A

Following these suggestions, we encourage our clients to check their server setups.

Containers & Orchestration

These items employ no vulnerable Log4j.

N/A

We invite our customers to perform a deep review of their containers configurations following the above guidelines.

Collaborative solutions (Exchange, Email pro, MXplan, Sharepoint)

These items employ no vulnerable Log4j.

N/A

N/A

Cloud Databases

These items employ no vulnerable Log4j.

N/A

N/A

Web Hosting

These items employ no vulnerable Log4j.

N/A

N/A

Data processing

This platform was running an insecure version of Log4j. All potentially vulnerable versions have been fixed.

All vulnerable versions have been patched with Log4J 2.17.0

N/A

AI Training

These items employ no vulnerable Log4j.

N/A

N/A

ML serving

These items employ no vulnerable Log4j.

N/A

N/A

VoIP

These items employ no vulnerable Log4j.

N/A

N/A

www.HostRooster.com

api.HostRooster.com

These items employ no vulnerable Log4j.

N/A

N/A

HostRooster cloud Internal systems

We’re still looking for susceptible Log4j library versions and mitigations. Vulnerable systems have been patched or are being mitigated. We review all software assets to guarantee the vulnerable library isn’t integrated into our IT applications.

New vulnerabilities are addressed.

As editors provide patches, mitigation implementation continues.

N/A

 

Say hello to HostRooster, the ultimate one-stop-shop for all your entrepreneurial needs! From website hosting to freelance services, HostRooster is the platform that puts the power of success in your hands. Think of it as a matchmaker for your dreams and your website – HostRooster connects you with the tools and services you need to bring your ideas to life. No more juggling multiple platforms and providers, HostRooster has got you covered. So why wait? Sign up today and join the ranks of the world’s greatest entrepreneurs. With HostRooster, the sky’s the limit! “Successful people do what unsuccessful people are not willing to do.” – Eric Thomas “Don’t wait for opportunities, create them.” – Anonymous “Success is not final, failure is not fatal: it is the courage to continue that counts.” 

%d bloggers like this: