Additional Information regarding potential vunderabilities. Specifically Log4j

We use Camtasia and SnagIT for training purposes. We run it from individual PCs or Laptops. Can you provide me information on what is being asked below? Current version we are on is 2021.

Additional Information

Camtasia

Snaggit

The following are acceptable mitigation activities

• Work with the application vendor and/or OEM to identify recommended steps to remediate or mitigate vulnerability
• Ensure Log4j version and mitigation timeline is documented in spreadsheet
• Focus on DMZ and Internet facing systems first, then devices accessible via B2B VPN, and finally other internal network systems.
• If possible, apply latest patches for Log4j (version 2.17.0) provided by Apache.
• Other possible mitigation activities:
• Restrict outbound connections from any potentially vulnerable server to only known-good locations
• Delete the Log4j library from application code base
• Remove the JndiLookup class file from the class path

Thanks,

Brian Warriner, Health First, Inc. 321-434-5589