Page History
...
For more information, see spring blog and CVE-2022-22965.
| Table of Contents |
|---|
Change log
| Timestamp | Description |
|---|---|
| 2022 04 04 18:00 GMT+1 |
|
Spring Framework (Spring4Shell) version 5.3.0 to 5.3.17, 5.2.0 to 5.2.19 is a part of the following products. Action to perform.
CATIA Magic portfolio
- Magic Collaboration Studio (release 19.0 SP4, 2021x GA, 2021x Refresh1, 2021x Refresh2)
No Magic portfolio
- Teamwork Cloud (release 19.0 SP4, 2021x GA, 2021x Refresh1, 2021x Refresh2)
- Cameo Collaborator for Teamwork Cloud (release 19.0 SP4, 2021x GA, 2021x Refresh1, 2021x Refresh2)
To Do: You have action to perform. See Remediation.
Remediation
Remediation instructions for collaboration tools (Magic Collaboration Studio, Teamwork Cloud, Cameo Collaborator for Teamwork Cloud) 2021x Refresh2
Before starting with remediation, please download https://repo.spring.io/artifactory/release/org/springframework/spring/5.3.18/spring-5.3.18-dist.zip
...
h. compress the content of extracted .war file
i. rename .zip with the .war file name, for example: admin.war
j. replace original .war file with modified one in <webapp.install.dir>/webapps.
k. repeat the modification for all .war files.
l. start WebApp service.
Remediation instructions for collaboration tools (Magic Collaboration Studio, Teamwork Cloud, Cameo Collaborator for Teamwork Cloud) 2021x Refresh1
Before starting with remediation, please download https://repo.spring.io/artifactory/release/org/springframework/spring/5.3.18/spring-5.3.18-dist.zip
...
d. compress the content of extracted webapp.war file
e. rename .zip with the webapp.war
f. replace original webapp.war file with modified one in <webapp.install.dir>/webapps
g. start WebApp service.
Remediation instructions for collaboration tools (Magic Collaboration Studio, Teamwork Cloud, Cameo Collaborator for Teamwork Cloud) 19.0 SP4
Before starting with remediation, please download https://repo.spring.io/artifactory/release/org/springframework/spring/5.3.18/spring-5.3.18-dist.zip
...