All configurations have been treated and are not vulnerable. Product is affected by CVE-2021-44228, CVE-2021-45046 scoped to a beta pre-release feature for a single customer who had been previously informed.

This is an ongoing product security incident and product status can change as more information becomes available. As this situation continues to evolve, we will implement or require of suppliers additional remediation actions as appropriate.Īs of December 27, DocuSign can confirm that the following services have been addressed and are not vulnerable to Log4j2. As a federal contractor, we are also complying with Emergency Directive 22-02 released on December 17.ĭocuSign has engaged critical suppliers for a comprehensive risk assessment and will work with our suppliers to confirm they have mitigations in place and are updating their software or services to remediate this issue. DocuSign has previously deployed and continues to enhance countermeasures consistent with recently published CISA guidance to provide layers of protection and increased situational awareness through regular monitoring and blocking of suspicious activity. Total capacity of removable media in bytesĬĬ has been actively working on assessing risk and treating affected assets since the vulnerability was initially disclosed on the morning of December 9.Īs of December 27, DocuSign continues to observe no indicators of compromise in our environment from Log4j2. Public IP address of device where event was capturedĬ Private IP addresses of device where event was capturedĬ

Type of file as determined by Code42 engineĬ Recipient email address for email exfiltration eventsĮmail subject line for email exfiltration events Sender email address for email exfiltration events Username that device is associated with in Code42 This playbook does not use any integrations. This playbook does not use any sub-playbooks.

This playbook uses the following sub-playbooks, integrations, and scripts. The data is output to the Code42.SecurityData context for use. This playbook searches for files via Code42 security events by either MD5 or SHA256 hash. This Playbook is part of the Code42 Pack.

Code42 ibm