PowerChute Business Edition / Spring4Shell ?

[jonathan176]

I recently upgrade my Power Chute Business Edition to 10.0.5 to address the Log4J/Log4Shell vulnerability.  Since then a new similar issue with the JDK 9+ has been found; dubbed Spring4Shell. 

https://nvd.nist.gov/vuln/detail/CVE-2022-22965

Does anyone know if this impacts the webserver built into Power Chute Business?

Thanks in advance,

Jonathan

[LarryK]

This is the website for security bulletin information: https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp

So far, no mention of Spring4Shell...

[BillP]

@jonathan176 

PowerChute Business Edition is not affected by Spring4Shell.

[jonathan176]

Thank you for directing me to a useful resource.

[jonathan176]

Thank you.