Checkmk Knowledge Base
Space shortcuts
Page tree

Versions Compared

Old Version 2

changes.mady.by.user Walter Fisch

Saved on

compared with

New Version Current

changes.mady.by.user Matthew Hierholzer

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Problem

Spring4Shell is a critical vulnerability.  CVE-2022-22965 in Spring – the open source Java framework. Using the vulnerability, an attacker can execute arbitrary code on a remote web server, which makes CVE-2022-22965 a critical threat, given the Spring framework’s popularity.

Solution

tribe29 Checkmk is aware of the vulnerability and has completed verification that this issue does not affect checkmk itself and the checkmk appliance as we are not using the spring framework in our products. 

...