Spring4Shell Vulnerabilities and Express Server

Issue

On March 29th, CVE-2022-22963 and CVE-2022-22965 was reported describing an exploit in the Spring4Shell library allowing a malicious user to download the Mirai sample to the “/tmp” folder and execute them after permission change using “chmod”.

Solution

All versions of Express Server are NOT affected by the reported vulnerabilities.

Our development teams have reviewed all other vulnerabilities in our Geo products and have determined these all to be low risk to the product. This means an attacker does not have control over what can be modified.

If you have any further questions please submit a support request and we'll be happy to assist.

About Express Server

The Express Server is a high-performance image streaming and geospatial data publishing tool that enables the transfer of large raster data files promptly and efficiently across enterprise GIS environments. The system is capable of processing large aerial images, satellite images, orthophotos, DEMs, and other geospatial raster formats. Express Server allows organizations to transfer only those portions of the image that are necessary, in several resolutions, thereby minimizing the volume of bandwidth consumed and improving the performance of applications. The Express Server is compliant with industry standards and can be integrated seamlessly with GIS systems and web-based mapping applications in addition to cloud infrastructures. The software is intended for providing services to defense agencies, commercial entities, environmental consultancy companies, utility companies, and public organizations that are in need of publishing large amounts of data for online use. The system applies sophisticated data compression mechanisms as well as dynamic mosaicking, and its architecture is highly scalable. The data is distributed safely and it is cached. Whether it is used for managing archives or for distributing data in real time, Express Server allows raster data management to make visualization, collaboration, and making decisions easier.