For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

amalix's avatar
amalix
Icon for Nimbostratus rankNimbostratus
Aug 04, 2022

Grails Framework Remote Code Execution Vulnerability - CVE-2022-35912

Hi Everyone,

Did anyone mitigate this vulnerability using ASM ?

Regards

security

1 Reply

  • AaronJB's avatar
    AaronJB
    Ret. Employee
    Aug 25, 2022

    There is an ASM signature for this - 200104796 - that signature is not specific to CVE-2022-35912 but rather is a generic mitigation for that class of attack, and existed prior to the disclosure of CVE-2022-35912.

    As long as you have signatures newer than 2022/04/10 then you'll already have the latest version of that signature, and just need to ensure it is enabled in your policies.

     

    Hope that helps!

    Aaron