Phenix Response to Apache log4j Vulnerability

Phenix is aware of the log4j (also known as Log4Shell) vulnerability. We have reviewed our implementation and, at this time, we do not believe that any Phenix systems have been affected.

The Phenix solution does not use log4j and therefore is not vulnerable to these attacks.

For more information from major cloud providers, please see the links below:

• Google: Apache Log4j 2 Vulnerability Security Advisory
• Azure: Microsoft’s Response to CVE-2021–44228 Apache Log4j 2 — Microsoft Security Response Center
• Oracle: Oracle Security Alert Advisory — CVE-2021–44228
• AWS: Hotpatch for Apache Log4j | AWS Open Source Blog