ClickTime’s Response to Log4j Vulnerability

On Friday, December 10, 2021, the United States Cybersecurity and Infrastructure Security Agency issued an alert about a vulnerability in Apache’s Log4j logging framework (CVE-2021-44228).

Our security and development teams have reviewed all of our code and internal systems and confirmed that the ClickTime service isn’t vulnerable to Log4j. We are actively monitoring this industry issue and reviewing all of our vendors and third-party services to determine if any of them use the vulnerable component and need to be updated.

We take the protection of our customers’ data very seriously. Updates will be posted to this thread at https://system.clicktime.com as additional information becomes available.

Updates

12/13/2021 03:00pm PT update: Our operations team identified one internal system monitoring tool whose vendor acknowledged it needed to be updated due to the Log4j (also known as Log4Shell) vulnerability. This system isn’t accessible to the public and thus wasn’t directly at risk but we have completed the update successfully. We continue to investigate our software and our vendors for any issues or updates needed.

12/14/2021 04:30pm PT update: Our security and development teams have reviewed all of our code and internal systems and confirmed that the ClickTime service isn’t vulnerable to Log4j.

12/15/2021 10:05am PT update: We continue to review all vendors, third-party software and third-party services we engage with to ensure that they are verifying and updating their systems as needed.

ClickTime Access Issues Resolved @ 11:15 PM PT – Nov. 11, 2021

ClickTime Customers, 

Service has been restored by 11:15 PM PT – Nov. 11, 2021   

We apologize for the inconvenience and disruption this caused.   This issue was caused by our hosting provider doing maintenance which brought down ClickTime.  Service has been restored and testing indicates the system is fully functional at no point was any data compromised.  

We apologize for any inconvenience you may have experienced.  Please email support@clicktime.com if you have questions or additional issues of any nature. Thank you for your understanding. 

The ClickTime Team

ClickTime Access Issues Update 2 @ 10:50 PM PT – Nov. 11, 2021

ClickTime Customers, 

We are sorry to inform you that we are continuing to be affected by an event outside our control which temporarily blocked access to ClickTime.com.    We are working to resolve the issue with our providers.   At this time we do not have an estimated time of restoration.    

We will continue to update this site as information becomes available.  

We apologize for the inconvenience and the disruption that this has caused.   

The ClickTime Team

ClickTime Access Issues Update 1 @ 9:55 PM PT – Nov. 11, 2021

ClickTime Customers, 

We are sorry to inform you that we are continuing to be affected by an event outside our control which temporarily blocked access to ClickTime.com.    We are working to resolve the issue with our providers.   At this time we anticipate service to be restored within the next hour.  

We will continue to update this site as information becomes available.  

We apologize for the inconvenience and the disruption that this has caused.   

The ClickTime Team

ClickTime Access Issues – Nov. 11, 2021

ClickTime Customers, 

We are sorry to inform you that we are currently being affected by an event outside our control which has temporarily blocked access to ClickTime.com.    We are working to resolve the issue with our providers.   At this time we do not have an estimate for restoration of service.   

We will continue to update this site as information becomes available.  

We apologize for the inconvenience and the disruption that this has caused.   

The ClickTime Team

Mobile App 1.4 Deprecated

If your ClickTime mobile app isn’t working and referred you to this system blog, you are probably using an old mobile app version (v1.4 or older) that is no longer supported. Please remove the old version of the mobile app from your mobile device.

You can download the new version of the ClickTime mobile app at the App Store for iOS devices or the Google Play store for Android devices.