Restricted web services on jena.de

Since the weekend, our city IT team has been working tirelessly to avert potential risks to the city's IT and web applications from the Log4-shell security vulnerability, which has been classified as extremely critical by the BSI (German Federal Office for Security and Information Technology). It is currently the task of the IT service to check the server connections and applications and to identify all areas that operate with Log4j. The areas that are also accessible from the Internet are being shut down until further notice to prevent malicious manipulation. For this reason, some applications on jena.de have also been shut down for checking or updating as a precautionary measure.

The following are currently restricted

• the site search on jena.de and other city portals
• the search in the map portal (map.jena.de)
• the search for lost property in the online lost and found office
• the Opendata portal
• Calling up the "disposal dates" on the KSJ website
• the administration of subsidies

We are working to ensure that the services are available again as quickly as possible, but are centrally dependent on the cooperation of some providers. We have already taken the necessary steps to update the Log4j software.