Smart ID Digital Access component

A Log4j critical vulnerability has been found, read more here: Log4J Vulnerability information (CVE-2021-44228).

The fix for the same with the latest Log4j library version 2.17 is contained in the Digital Access 6.1.2 release, see the release note.

If you have a Digital Access version between 6.0.5 and 6.1.0, and an upgrade to version 6.1.1 is not possible, see Log 4J vulnerability information for Digital Access for more information. 

An openSSL vulnerability has been found, that can affect Hybrid Access Gateway and Digital Access of versions from 5.13.x to 6.0.4.

Read this article for instructions how to handle the vulnerability: Handle the CVE-2021-3449 Vulnerability

A severe vulnerability has been found in the Unix and Linux operating systems. This is only a problem if you have added unprivileged users to the Digital Access system. The default installation does not have any unprivileged users.

Read this article for instructions how to handle the vulnerability: Handle the CVE-2021-3156 Vulnerability.