ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-42550

PoC ×3—
CVSS 3.1
6.6 medium
EPSS
4%p91
Published
()
Modified
Description

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

Vendors
qosredhatnetappsiemens
Products
logback, satellite, cloud manager, service level manager, snap creator framework, sinec nms
Weakness
CWE-502
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (4.4%)

In the news