Windchill and FlexPLM Critical Vulnerability

[RU_9886900]

I am using Windchill PDMLink Release 11.1 and Datecode with CPS M020-CPS23

Windchill and FlexPLM Critical Vulnerability

[VladimirN]

Article - "Potential Impact of Apache HTTP Server (2.4 to 2.4.54) security vulnerability (CVE-2022-36760) in Windchill PDMLink & FlexPLM": https://www.ptc.com/en/support/article/CS386653 

[avillanueva]

Wow, 2 in short order. There was an email sent out being discussed here. Unrelated I think...

https://community.ptc.com/t5/Windchill/Windchill-and-FlexPLM-Critical-Vulnerability/td-p/1059534

[MikeJasperson]

To confirm, this is a legitimate PTC communication.  Please direct your administration teams to review https://www.ptc.com/support/article/CS466318 and take action.  Contact Technical Support with any questions.

Thank you,
Mike Jasperson
Vice President - PTC Software Operations and Support

[avillanueva]

Thanks Mike. Strange that there is a statement saying there is no evidence of exploited PTC customer BUT we are asked to look for very specific files as IOC. Hmmm