2022-04-01<\/p>\n\n\n\n
Upon receiving reports regarding these vulnerabilities, the DTEN Security team began an investigation to determine any potential impacts on our system. At this time, DTEN has determined that none of its systems have been compromised by this attack, and no intrusion has occurred. <\/strong><\/p>\n\n\n\n DTEN\u2019s layered defense includes technologies and controls to identify and\/or prevent these types of threats, including assessing vulnerabilities and applying appropriate protection and detection control updates.<\/p>\n\n\n\n Reference:<\/p>\n\n\n\nAt-A-Glance Summary<\/h2>\n\n\n\n
Product \/Type:<\/strong><\/td> Threat\/ Type:<\/strong><\/td> Severity\/DTEN Impact<\/strong><\/td> Attacks on DTEN<\/strong><\/td> Fix Available?<\/strong><\/td><\/tr> Spring Core\/
framework<\/td>Spring4Shell \/bug –
allows
unauthenticated
execution of arbitrary
code<\/td>High\/
DTEN is not impacted<\/strong>
(DTEN uses later version (jdk8) which
is unaffected)<\/td>None<\/td> Yes
Not needed for
DTEN<\/td><\/tr>Spring Cloud
Function\/
SpringBoot middleware<\/td>SPEL expression
injection \/allows
remote command
execution<\/td>High\/
DTEN is not impacted – (does not use
Spring
Cloud Function
Framework)<\/td>None<\/td> Yes
Not needed
for DTEN<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nVulnerability Scope & Details<\/h2>\n\n\n\n
CVE-2022-22965<\/h3>\n\n\n\n