CAPTOR apps and services do not utilize Apache Log4j (CVE-2021-44228)
Josh Bohls
We are receiving some questions concerning the recently discovered vulnerability in Apache Log4j. The CAPTOR app does not use or rely on Apache Log4j and thus is not impacted directly by this new threat.
We are aware of some of the EMM platforms being directly impacted, and since CAPTOR requires the use of an EMM platform for management and deployment, we recommend you check with your specific provider on the status of a patch and action plan.
If your organization is utilizing the CAPTOR secure content copy backup service, we recommend you investigate the destination content server to determine whether the Apache Log4j library is being used, and take action to eliminate the threat. The data transfer services that are supported by the CAPTOR app backup service are safe and require no action.
If you have any additional questions or concerns please submit a support ticket here. We will update this post as the situation develops.