Guidance for reducing Spring4Shell security vulnerability risk with Citrix WAF (CVE-2022-22963 / CVE-2022-22965)

Guidance for reducing Spring4Shell security vulnerability risk with Citrix WAF | Citrix Blogs

 

Guidance for reducing Spring4Shell security vulnerability risk with Citrix WAF (CVE-2022-22963 / CVE-2022-22965)

深信服 - 漏洞二次通告 ：Spring Framework远程代码执行漏洞CVE-2022-22965

 

漏洞二次通告 ：Spring Framework远程代码执行漏洞CVE-2022-22965 (kdzl.cn)

 

修复建议参考《Spring Framework远程代码执行漏洞CVE-2022-22965响应通告》

报告下载地址：

https://edr.sangfor.com.cn//api/download/Spring%20Framework%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9ECVE-2022-22965%E5%93%8D%E5%BA%94%E9%80%9A%E5%91%8A.pdf

深信服 - 漏洞二次通告 ：Spring Framework远程代码执行漏洞CVE-2022-22965

McAfee IPS - Network Security Platform (NSP) User-Defined Signature: CVE Number: CVE-2022-22963 and CVE-2022-22965

Coverage for Spring Cloud Vulnerability (CVE-2022-22963), Spring Beans Vulnerability (CVE-2022-22965), and Spring Expression Vulnerability (CVE-2022-22950)

 

https://kc.mcafee.com/corporate/index?page=content&id=KB95447&locale=en_US

 

 

McAfee IPS - Network Security Platform (NSP) User-Defined Signature: CVE Number: CVE-2022-22963 and CVE-2022-22965