Situation - What happened?
On April 1, 2022, the Spring4Shell remote execution vulnerability ranked 9.8/10 was found in the Spring framework. Impact from Spring4Shell is limited because it is exploitable only under a set of very specific conditions. See this article for more details
What is the potential impact?
In accordance with Mediaocean’s policies and procedures, we have been analyzing the exposure of our application suites for both Mediaocean and Flashtalking by Mediaocean solution. At this time none of our applications have been found to be impacted by the vulnerability. We are continuing to review as new information becomes available and will confirm our analysis using all the tools at our disposal.
What is the bottom line?
At this time we are not aware of any risks related to Spring4Shell in any Mediaocean or Flashtalking by Mediaocean application.