Version 6.4.20.1212

This update is produced in reaction to the Log4j2 RCE Vulnerability 

This update include the changes below:

1. Log4j is completely removed from the SSO server (the frontend) in the DualShield platform

2. Log4j 2 is completely removed from the authentication server (the backend) in the DualShield platform. Log4j 1.2.17 is kept as it can't be easily upgraded yet, but it is not susceptible to this vulnerability.

3. Log4j 2 in the certificate server (frontend) has been upgraded to the latest log4j 2.15 which has fixed this vulnerability.

Version 6.4.20.1129

New Features

• Add support for external SQL based user directory, e.g. Keycloak (3344, 3346)
• Release DualShield MyVD (Beta)

...