Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC ×33

CVE-2021-42550

CVSS 3.1
6.6 medium
EPSS
5%p92
Published
·
Modified
Analyze CVE-2021-42550 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

Vendors
qosredhatnetappsiemens
Products
logback, satellite, cloud manager, service level manager, snap creator framework, sinec nms
Weakness
CWE-502
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (4.8%)

In the news

2 stories