Recently, Apache announced a critical vulnerability with their log4j API, a logging library for Java-based applications used by many web-based applications and services, including PrinterOn services. When exploited, this vulnerability can allow hackers access to servers and run code remotely. This vulnerability affects all installations of PrinterOn as well as servers hosting standalone instances of Print Delivery Station, Print Delivery Hub, and Print Delivery Gateway.
To close this vulnerability, PrinterOn recommends that you install PrinterOn Enterprise version 4.3.9, if at all possible.
Note: To upgrade from a version earlier than PrinterOn Enterprise version 4.2.8, you must first upgrade to version 4.3.0, then upgrade to version 4.3.9. Please refer to the Release Notes for more information on the upgrade path.
If it is not possible to install the latest version of the software, PrinterOn has provided a patch to close this vulnerability, along with a README file that outlines the steps to apply the patch. PrinterOn strongly recommends applying this patch as soon as possible.