CVE:CVE-2021-22096
CNNVD:CNNVD-202110-1810
Vmware Spring Framework是美国威睿（Vmware）公司的一套开源的Java、JavaEE应用程序框架。该框架可帮助开发人员构建高质量的应用。
Vmware Spring Framework 存在安全漏洞，该漏洞源于通过日志注入绕过 Spring Framework 的访问限制，以更改数据。
solution:Upgrade vmware spring_framework to a higher version than 5.2.17,5.3.10,and avoid the version [5.2.0,5.2.17],[5.3.0,5.3.10]; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp management_services_for_element_software_and_netapp_hci to a higher version than -; Upgrade netapp metrocluster_tiebreaker to a higher version than -; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade oracle communications_cloud_native_core_console to a higher version than 1.9.0,and avoid the version 1.9.0; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 1.15.0,and avoid the version 1.15.0