GoTo's Response to Log4j — Remediated
On Friday, December 10th, a zero-day vulnerability affecting a widely utilized open-source logging tool that is part of Apache Logging Services impacted a meaningful subset of the software industry. The security of our services and customer data is a top priority for GoTo and we are taking this matter very seriously. Upon becoming aware of the vulnerability, GoTo initiated an investigation to determine if any further action is required to mitigate against the vulnerability. Additionally, we continue to monitor for the latest information regarding this issue with Apache to keep our software and customers safe and secure.
At this point any vulnerabilities have been remediated to the best of our knowledge and it has been determined there is no impact.
We will keep customers apprised of any status updates on this page. In the rare circumstance where a customer needs to take an action, we will communicate directly.