Updated: April, 27th 2022
Zywave does utilize the “Log4j” library within its infrastructure. In response to CVE-2021-44228, Zywave completed its investigation and subsequent mitigation plans have been executed to remediate the disclosed vulnerability. Zywave has successfully mitigated the Log4j vulnerability in all client facing products.
Zywave has found no indication of a compromise exploiting the Log4j vulnerability.