Updated: April 7, 2022
Strategy 2021 Update 5.1 is available and provides a comprehensive fix for the Spring Framework library vulnerabilities. Download it today from the MicroStrategy Resource Center or access Strategy on AWS or Azure via the MicroStrategy Cloud Console. We strongly recommend all customers apply Strategy 2021 Update 5.1.
Strategy is tracking a remote code execution vulnerability (CVE-2022-22965) known as “Spring4Shell” which affects the Spring framework. The Spring framework is widely used in many applications and services across the industry and this vulnerability and mitigations are being widely reported on, including:
In the following article we provide recommended actions to help maintain the security posture of your Strategy environment. Please ensure that you are logged into our Strategy Community to see this article:
MicroStrategy’s response to the Spring Framework Remote Code Execution Vulnerability
