Case Study: a leading EHR software vendor remediates Log4j in under 12 hours with Mend

Electronic Healthcare Record (ehr) Software Vendor remediates Log4j in under 12 hours with Mend

An electronic healthcare record (EHR) software vendor faced the urgent challenge of remediating the critical Log4j vulnerability (CVE-2021-44228) across its vast code base to prevent potential server takeover by malicious actors. The company needed to act quickly after the vulnerability's disclosure and turned to its existing vendor, Mend, and its Software Composition Analysis (SCA) solution for a rapid response.

Using Mend, the vendor was able to scan its entire code base, identify every instance of the vulnerable Log4j library, and require immediate upgrades from application owners. As a result, Mend enabled the company to be completely patched and pushed to production across its entire organization in under 12 hours, securing its many applications and AWS cloud infrastructure with a greater than 98% degree of certainty.