CVE:CVE-2022-22968
CNNVD:CNNVD-202204-3302
Vmware Spring Framework是美国威睿（Vmware）公司的一套开源的Java、JavaEE应用程序框架。该框架可帮助开发人员构建高质量的应用。
Vmware Spring Framework存在安全特征问题漏洞，该漏洞源于DataBinder上disallowedFields的模式是区分大小写的，这意味着字段没有得到有效保护，除非该字段的第一个字符同时以大写和小写字母列出，包括属性路径中所有嵌套字段的第一个字符的大写和小写字母。远程攻击者利用该漏洞可以绕过实施的安全限制。
solution:Upgrade vmware spring_framework to a higher version than 5.2.0,5.2.20,5.3.18,and avoid the version (,5.2.0),[5.2.0,5.2.20],[5.3.0,5.3.18]; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_secure_agent to a higher version than -; Upgrade netapp metrocluster_tiebreaker to a higher version than -; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade oracle mysql_enterprise_monitor to a higher version than 8.0.29,and avoid the version (,8.0.29]