3214861 - Does Spring Framework vulnerabilities CVE-2022-22950, CVE-2022-22970, or CVE 2022-22971 impact ASE HADR? - SRS

• Does Spring Framework vulnerability CVE-2022-22950, CVE-2022-22970, or CVE 2022-22971 impact ASE/SRS?
• Vulnerability scanner returns spring-core-3.2.5.RELEASE.jar as security vulnerability CVE-2022-22950, CVE-2022-22970, and CVE 2022-22971.
  
  • This file is found in a directory of the RMA component, showing two example paths:
    
    $SYBASE/DM/RMA-16_0/libs/spring/spring-core-3.2.5.RELEASE.jar
    
    $SYBASE/<SID>/DM/RMA-16_0/libs/spring/spring-core-3.2.5.RELEASE.jar

• SAP Replication Server 16.0 (SRS)
• SAP Adaptive Server Enterprise (ASE) 16.0 with Always-on Option (HADR)
• SAP Adaptive Server Enterprise (ASE) 16.0 for Business Suite with High Availability Disaster Recovery (BHADR) 
  
  • HADR component RMA
• Spring Framework 

 CVE-2022-22950, CVE-2022-22970, CVE 2022-22971, cockpit, spring framework, RMA, spring-core-3.2.5.RELEASE.jar, SP03, SP04 springframework-spring-core CVE  , KBA , BC-SYB-REP-SAP , Replication with SAP Suite / SAP BW , BC-DB-SYB , Business Suite on Adaptive Server Enterprise , BC-SYB-ASE , Sybase ASE Database Platform (non Business Suite) , BC-SYB-REP , Sybase Replication Server (standalone) , Problem