Liquidware Labs has been made aware of CVE-2021-45046 & CVE-2021-44228 Apache Log4j Security Vulnerabilities and has developed an fix to address its impact regarding Stratusphere. Once mitigation steps are fully addressed we will update this notification with a link to steps to fix Stratusphere.
Reference: https://logging.apache.org/log4j/2.x/security.html
ProfileUnity and all of its 3rd party components including MondoDB are not impacted by CVE-2021-45046 & CVE-2021-44228**
(ProfileUnity does not ship with MongoDB Atlas Search which is affected.)
https://www.mongodb.com/blog/post/log4shell-vulnerability-cve-2021-44228-and-mongodb
For more information and steps to address the issue please refer to the following KB: