Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Is

...

MacroSuite affected by the remote code execution (RCE) vulnerability of Log4j?

Cp panel macro
data%7B%22components%22%3A%5B%5D%2C%22titleAlignment%22%3A%22left%22%2C%22contentAlignment%22%3A%22left%22%2C%22title%22%3A%22Is%20Macrosuite%20effaced%20by%20the%20remote%20code%20execution%20(RCE)%20vulnerability%20affecting%20Log4j%3F%22%2C%22titleColor%22%3A%22%23172b4d%22%2C%22titleContainerColor%22%3A%22%23ffffff%22%2C%22background%22%3A%22%23ffffff%22%2C%22borderColor%22%3A%22%230052CC%22%2C%22borderRadius%22%3A4%2C%22borderType%22%3A%22solid%22%2C%22icon%22%3A%22%22%7D

No, Caelor customers are not vulnerable, and no action is required. This vulnerability has been mitigated for all Caelor cloud products previously using vulnerable versions of Log4j.

Security is a very important to Caelor. Therefore Caelor complies with the highest security standards. That's why Marcosuite MarcoSuite is Cloud Fortified Certified. This is Atlassian's highest standard for cloud apps. More Information about Cloud Fortified can be found here.

MacroSuite Google Hosting - what happens with your data?

Cp panel macro
data%7B%22components%22%3A%5B%5D%2C%22titleAlignment%22%3A%22left%22%2C%22contentAlignment%22%3A%22left%22%2C%22title%22%3A%22%22%2C%22titleColor%22%3A%22%230052CC%22%2C%22titleContainerColor%22%3A%22%23ffffff%22%2C%22background%22%3A%22%23ffffff%22%2C%22borderColor%22%3A%22%23cccccc%22%2C%22borderRadius%22%3A4%2C%22borderType%22%3A%22solid%22%2C%22icon%22%3A%22%22%7D

Don’t worry. We don’t store any of your data.

In recent years, Google’s cloud hosting solution has risen to prominence and established itself as a leading service for millions of customers. This is why we’ve decided to transition MacroSuite to Google Hosting.

We use Google servers in Europe. We don’t store any texts, images, or configuration on our servers; these are stored on your Confluence instance.

Macros without body; macro information gets sent from your Confluence page to our server, then it renders and sends the rendered macro back to your Confluence page, while the data that got rendered on the server is automatically deleted.

Macros with body; macro information and content gets sent from your Confluence page to our server, then it renders and sends the rendered macro back to your Confluence page, while the data that got rendered on the server is automatically deleted.

Which sort of data is collected and what happens with that data?

Cp panel macro
data%7B%22components%22%3A%5B%5D%2C%22titleAlignment%22%3A%22left%22%2C%22contentAlignment%22%3A%22left%22%2C%22title%22%3A%22Is%20Macrosuite%20effaced%20by%20the%20remote%20code%20execution%20(RCE)%20vulnerability%20affecting%20Log4j%3F%22%2C%22titleColor%22%3A%22%23172b4d%22%2C%22titleContainerColor%22%3A%22%23ffffff%22%2C%22background%22%3A%22%23ffffff%22%2C%22borderColor%22%3A%22%230052CC%22%2C%22borderRadius%22%3A4%2C%22borderType%22%3A%22solid%22%2C%22icon%22%3A%22%22%7D

Macrosuite MacroSuite is storing the installation information that is being provided by Atlassian. This data is needed to identify a client but does not indicate or expose any user data. Additionally, we are tracking usage information of our product (e.g. which macro types are being used). However, we are not collecting any contextual information around our macros: we don’t know which images you are using in macros, the name of your Confluence pages, their authors/editors or any content on them. At no point we collect any personally identifiable information.

Where is the collected data being stored?

Cp panel macro
data%7B%22components%22%3A%5B%5D%2C%22titleAlignment%22%3A%22left%22%2C%22contentAlignment%22%3A%22left%22%2C%22title%22%3A%22Is%20Macrosuite%20effaced%20by%20the%20remote%20code%20execution%20(RCE)%20vulnerability%20affecting%20Log4j%3F%22%2C%22titleColor%22%3A%22%23172b4d%22%2C%22titleContainerColor%22%3A%22%23ffffff%22%2C%22background%22%3A%22%23ffffff%22%2C%22borderColor%22%3A%22%230052CC%22%2C%22borderRadius%22%3A4%2C%22borderType%22%3A%22solid%22%2C%22icon%22%3A%22%22%7D

The data is saved on data center located in Düsseldorf, Germany.

Which data security protocols in relation to data breaches are in place?

...

Cp panel macro
data%7B%22components%22%3A%5B%5D%2C%22titleAlignment%22%3A%22left%22%2C%22contentAlignment%22%3A%22left%22%2C%22title%22%3A%22%22%2C%22titleColor%22%3A%22%23000000%22%2C%22titleContainerColor%22%3A%22%23ffffff%22%2C%22background%22%3A%22%23ffffff%22%2C%22borderColor%22%3A%22%230052CC%22%2C%22borderRadius%22%3A4%2C%22borderType%22%3A%22solid%22%2C%22icon%22%3A%22%22%7D

The following functions were integrated within the new update:

  • Within the macro "Button" it is now possible to design the buttons in more detail (size, border, type). In addition, the user has an improved link selection for referring to further content

  • The Page Divider now maps the selection of page divider types and offers the option to use different colours colors for symbol or text

  • The page countdown now has different countdown timer types. In addition, time zone support has been implemented, which can also be integrated in different colours colors and fonts on Confluence

  • The macro image carousel has been extended with a new thumbnail navigation, the function of automatic playback and an improved image selection. In addition, the user can now define the height and width of the carousel as desired and determine the image zoom type

  • In the Confluence Editor, the option to use many native Confluence functions has now been integrated

  • Tabs can be created within tabs with icons and there is a choice between different tab types.