Published: December 21, 2020
AvePoint is releasing this security advisory to inform customers that we are aware of the recent security advisory https://cyber.dhs.gov/ed/21-01/ and are actively monitoring the situation.
AvePoint does not use SolarWinds and based on our investigation to date has not been impacted by the incident. We are evaluating the risk to our supply chain for any possible indirect exposure to the SolarWinds incident.
Security Actions - No additional action is required.
Mitigation Steps - Not needed at this moment.
AvePoint implements best-in-class techniques for identifying, protecting, and detecting cybersecurity threats.
The information security and data privacy of our customers is AvePoint’s highest priority. If you have any questions about this and/or you are contacted by anyone else about this issue, please contact our security team immediately at firstname.lastname@example.org.
For your additional information please find AvePoint’s reporting policy and response plan: https://www.avepoint.com/company/vulnerability-reporting-policy/