2B Advice PrIME not affected by log4j vulnerability

For a week now, the web has known hardly any other topic than the security vulnerability in log4J. Log4j is a framework for logging application messages in Java and is virtually a de facto standard.

On December 10, 2021, a zero-day vulnerability in log4j version 2 was disclosed. Attackers can exploit this vulnerability to execute malicious code on the respective host systems. The first ransomware attacks have already taken place. According to the BSI, the vulnerability has caused an "extremely critical threat situation" and is at "red alert level".

Your data protection management solution 2B Advice PrIME is not affected by this vulnerability. We have evaluated the hosting infrastructure for the 2B Advice PrIME SaaS solution with regard to the log4j vulnerability and can state that we are not affected. Log4j is in no way integrated into our products and services. The 3rd party components used in our solutions are also not affected by the log4j vulnerability.

• Companies and consumers can find further information on detection and response on the BSI website:
  bsi.bund.de/EN/topics/companies-and-organizations/information-and-recommendations/recommendations-by-target/web-applications/log4j/log4j_node.html