RedEye Statement on Java Log4j Security Vulnerability

On 11 December 2021, a security vulnerability for the Java logging library Apache Log4j was reported in CVE 2021-44228. Apache Log4j is widely used by many web products globally.

RedEye assessed the risk immediately and determined that our app solutions are not exposed to this vulnerability because the versions of Java used by RedEye Apps are higher than those that can be exploited.

RedEye has also disabled the feature that the vulnerability relies on, to mitigate any residual risk.

If you have any concerns, please contact the RedEye Product Support team by emailing [email protected].