Skip to main content
Level 2
December 14, 2021
Question

Hey Intuit,NO MENTION of the LOG4J vulnerability which you guys use. What is the story??? This is SERIOUSLY BAD and VULNERABLE, and you have NO STATEMENT YET?

  • December 14, 2021
  • 2 replies
  • 21 views
No text available
This topic has been closed for replies.

2 replies

George4Tacks
Level 15
December 15, 2021

I think they demonstrated an answer this morning as everything seemed to turn to KAKA. 

Answers are easy. Questions are hard!
taxburnerAuthor
Level 2
December 15, 2021

From what I've read they merely have to update log4j and/or change a parameter.  Perhaps they will notify us when that is fixed?  Or not.  Keeping us informed on their operations isn't exactly something they do, until too many people speak up.  And I'm sorry if I hurt anyone's feelings, but most tax preparers are in the dark on this one!  Hopefully they have IT people in their organization keeping track of these things!

IntuitBettyJo
Community Manager
December 15, 2021

Hi there, 

I took a look into this for you and was able to find an article on the steps Intuit is taking in regards to this. 

Addressing the potential impact of the Log4j vulnerability for the industry, and Intuit 

Hope that helps!

-Betty Jo 

Betty Jo
taxburnerAuthor
Level 2
December 15, 2021

Thanks Betty Jo.

Honestly, it doesn't really help much at all, except to let me know that Intuit now knows it's an issue.  

The Blog post you directed me to should be streaming into the Lacerte Notifications!

Intuit should have already evaluated what exposure we have and notified us.  Should we not use Lacerte while connected to the internet?  How vulnerable is our data?  Or wouldn't it just be easier for Intuit to update log4j and be done with it?  

On second thought Betty Jo, that helped more than I thought.  Intuit's actions over these many years have always indicated, while stating how much they care about their customers and their data, that their actions probe otherwise.  They only do what they have to for their bottom line, lie to their customers, and hide the truth.  "Fire your accountant.  You don't need them anymore" - QuickBooks    "Free, Free, Free"  - TurboTax

Level 3
December 21, 2021

The tax planning program is the one that has log4.jar installed.