Skip to main content
commvault.com commvault.com
Answer

Spring4Shell vulnerability cve-2022-22963

  • March 31, 2022
  • 6 replies
  • 963 views
M
Certified Expert
Forum|alt.badge.img+5

Is the Commvault Software affected? If so which components?

Best answer by Damian Andre

Hey folks,

Please track this thread for the latest:

 

 

If you have a question or comment, please create a topic

6 replies

M
Certified Expert
Forum|alt.badge.img+5
  • M ScheepersCertified Expert
  • Author
  • Certified Expert
  • March 31, 2022

it noticed several 4.3 .x spring Jar files for the message queue. Not sure where it been used for.

1 Attachments
R
Vaulter
Forum|alt.badge.img+4

Hi,

 

This is currently been investigated by our Security and Development team. I hope I have some more info soon.

 

Kind regards,

Remi

M
Certified Expert
Forum|alt.badge.img+5
  • M ScheepersCertified Expert
  • Author
  • Certified Expert
  • March 31, 2022

thanks @Remi Sprangers . Hopefully we have a answer soon..

R
Vaulter
Forum|alt.badge.img+4

HI @M Scheepers, Just to let you know, there has been opened a critical case with our development and we are keeping track of this. As soon as we know more we will inform you.

 

Kind regards,

Remi

M
M
Certified Expert
Forum|alt.badge.img+5
  • M ScheepersCertified Expert
  • Author
  • Certified Expert
  • March 31, 2022

Thanks. keep me us posted @Remi Sprangers 

Damian Andre
Vaulter
Forum|alt.badge.img+22
  • Damian AndreVaulter
  • Vaulter
  • Answer
  • April 1, 2022

Hey folks,

Please track this thread for the latest:

 

 

Terms & ConditionsCookie settingsAccessibility statement