...
| Info |
|---|
A newly revealed vulnerability impacting Spring MVC or Spring WebFlux application running on JDK 9+ and registered as CVE-2022-22965 with the highest severity rating. |
| Status |
|---|
| colour | Green |
|---|
| title | LAST TESTED ON CHECKMK 2.0p15 |
|---|
|
| Panel |
|---|
| borderColor | black |
|---|
| bgColor | #f8f8f8 |
|---|
| title | Table of Contents |
|---|
|
|
Problem
Spring4Shell is a critical vulnerability. CVE-2022-22965 in Spring – the open-source Java framework. Using the vulnerability, an attacker can execute arbitrary code on a remote web server, which makes CVE-2022-22965 a critical threat, given the Spring framework’s popularity.
...
Checkmk is aware of the vulnerability and has completed verification that this issue does not affect checkmk Checkmk itself and the checkmk Checkmk appliance, as we are not using the spring framework in our products.
...
| Filter by label (Content by label) |
|---|
| showLabels | false |
|---|
| max | 5 |
|---|
| spaces | KB |
|---|
| showSpace | false |
|---|
| sort | modified |
|---|
| reverse | true |
|---|
| type | page |
|---|
| cql | label = "kb-troubleshooting-article" in ( "security" , "cve" ) and type = "page" and space = "KB" |
|---|
| labels | kb-troubleshooting-articlesecurity |
|---|
|
...