topic A question about Log4j vulnerability in Developer

A question about Log4j vulnerability

Anonymous — Tue, 14 Dec 2021 19:01:52 GMT

Is Power BI affected by it? I've found nowhere denying nor confirming that Power BI uses it.

My initial understanding is that it's not affected, but i want to be sure about it.

Re: A question about Log4j vulnerability

AlexisOlson — Tue, 14 Dec 2021 21:34:24 GMT

As far as I can tell, there isn't any direct vulnerability but I'd recommend reading Microsoft's response yourself:

https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/

Re: A question about Log4j vulnerability

Anonymous — Mon, 20 Dec 2021 07:15:28 GMT

Hi Anonymous,

Thank you so much for bringing this issue to our attention.

Overall, Microsoft is aware of the log4j exploit and actively working with all services to remediate any issues. The Power BI service does not have any known reliance on this vulnerable library.
For the most up-to-date information on the issue status, please refer to the MSRC Advisory and Microsoft Security Threat Intelligence sites.

Regards,

Xiaoxin Sheng