CVE-2022-22963

Question

Hi,

last days there was a vulnerability issue CVE-2022-22963 according to spring cloud found. I wonder if there is an official statement from Microsoft if their services (e.g. Azure, Azure DevOps) are affected by this leak.
I assume that Azure DevOps does not contain any Java Spring Cloud components and is therefore not affected. Is there an official statement from Microsoft on the subject?

Thanks in advance

Answer 1

Hello @Tino Schinnerling-prof - You can look out for blog posts from the Microsoft Threat Intelligence team here: https://www.microsoft.com/security/blog/microsoft-security-intelligence

There's one for CVE-2022-22965: https://www.microsoft.com/security/blog/2022/04/04/springshell-rce-vulnerability-guidance-for-protecting-against-and-detecting-cve-2022-22965/