Dear Compart customers,

As you may have heard from the press, a vulnerability in a widely used open source Java library (Log4j2) was recently discovered and published as CVE-2021-44228. Immediately after this security vulnerability became known on December 10, 2021, Compart began investigating possible effects on its products and taking counter measures.

Which Compart products are affected?

One Compart product uses the library affected by the security vulnerability (Log4j2 <= 2.14.1). The affected product is:

• DocBridge® Impress Designer up to and including version 2.0.1

What actions is Compart taking to mitigate the risk?

What else is Compart doing to minimize the risk posed by Log4j2?

Immediately after the security gap became known, all internal IT systems were checked for vulnerability in addition to our own software, the recommended counter measures were initiated and available patches were installed. We will continue to monitor the situation closely and inform our customers promptly if new information becomes available.