SAP Knowledge Base Article - Preview

3214861 - Does Spring Framework vulnerabilities CVE-2022-22950, CVE-2022-22970, or CVE 2022-22971 impact ASE HADR? - SRS

Symptom

  • Does Spring Framework vulnerability CVE-2022-22950, CVE-2022-22970, or CVE 2022-22971 impact ASE/SRS?
  • Vulnerability scanner returns spring-core-3.2.5.RELEASE.jar as security vulnerability CVE-2022-22950, CVE-2022-22970, and CVE 2022-22971.
    • This file is found in a directory of the RMA component, showing two example paths:

      $SYBASE/DM/RMA-16_0/libs/spring/spring-core-3.2.5.RELEASE.jar

      $SYBASE/<SID>/DM/RMA-16_0/libs/spring/spring-core-3.2.5.RELEASE.jar


    Read more...

    Environment

    • SAP Replication Server 16.0 (SRS)
    • SAP Adaptive Server Enterprise (ASE) 16.0 with Always-on Option (HADR)
    • SAP Adaptive Server Enterprise (ASE) 16.0 for Business Suite with High Availability Disaster Recovery (BHADR) 
      • HADR component RMA
    • Spring Framework 

    Keywords

     CVE-2022-22950, CVE-2022-22970, CVE 2022-22971, cockpit, spring framework, RMA, spring-core-3.2.5.RELEASE.jar, SP03, SP04 springframework-spring-core CVE  , KBA , BC-SYB-REP-SAP , Replication with SAP Suite / SAP BW , BC-DB-SYB , Business Suite on Adaptive Server Enterprise , BC-SYB-ASE , Sybase ASE Database Platform (non Business Suite) , BC-SYB-REP , Sybase Replication Server (standalone) , Problem

    About this page

    This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

    Search for additional results

    Visit SAP Support Portal's SAP Notes and KBA Search.