Checkmk is not affected by Spring4Shell (CVE-2022-22965)

Table of Contents

Problem

Spring4Shell is a critical vulnerability. CVE-2022-22965 in Spring – the open-source Java framework. Using the vulnerability, an attacker can execute arbitrary code on a remote web server, which makes CVE-2022-22965 a critical threat, given the Spring framework’s popularity.

Solution

Checkmk is aware of the vulnerability and has completed verification that this issue does not affect Checkmk itself and the Checkmk appliance, as we are not using the spring framework in our products.

Checkmk is not affected by Spring4Shell (CVE-2022-22965)

Problem

Solution

Related articles