Steve Ripaldi

Steve Ripaldi
Senior Director, Product & Infrastructure Security

Steve Ripaldi leads the Okta Product and Infrastructure Security teams at Okta.

Steve Ripaldi

Okta's Response to CVE-2022-22965 ("Spring4Shell")

Last Updated: 3/4/2022 1.30pm Pacific Time Three critical vulnerabilities have been identified affecting the Java Spring Framework and related software components - with one specific CVE being known as Spring4Shell/SpringShell (CVE-2022-22965). CVE-2022-22965: Within Spring Core, A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. Okta Security has triaged the Spring4Shell vulnerability, and determined Okta is not...