Forum Discussion
Dave_Pisarek
Mar 31, 2022Cirrus
SpringFramework 0-day
Do we know if ASM is able to protect against this SpringFramework 0-day cve?
https://thehackernews.com/2022/03/unpatched-java-spring-framework-0-day.html
- F5LUXNimbostratus
more infos coming soon:
https://support.f5.com/csp/article/K11510688 - buulamAdmin
WAF signatures have now been released: https://support.f5.com/csp/article/K24912123
- Ismael_GoncalvesEmployee
I put together a Python script that enforces (remove from staging) the signatures ID explicited listed in the article K24912123. I hope it helps:
https://github.com/irgoncalves/f5-waf-enforce-sig-Spring4Shell
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects