Lucene search
PRIOn knowledge basePRION:CVE-2021-42550HistoryDec 16, 2021 - 7:15 p.m.
Design/Logic Flaw
2021-12-1619:15:00
PRIOn knowledge base
www.prio-n.com
6
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.
References
logback.qos.ch/news.html
packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html
seclists.org/fulldisclosure/2022/Jul/11
cert-portal.siemens.com/productcert/pdf/ssa-371761.pdf
github.com/cn-panda/logbackRceDemo
jira.qos.ch/browse/LOGBACK-1591
security.netapp.com/advisory/ntap-20211229-0001/
Related
atlassian
atlassian
Upgrade Logback for CVE-2021-42550
2021-12-17 19:03:40
Upgrade Logback for CVE-2021-42550
2021-12-17 19:03:40
cvelist
cvelist
ibm
ibm
redhatcve
redhatcve
CVE-2021-42550
2021-12-17 09:49:50
ubuntucve
ubuntucve
CVE-2021-42550
2021-12-16 00:00:00
f5
f5
K97521840 : logback vulnerability CVE-2021-42550
2022-01-05 00:00:00
github
github
Deserialization of Untrusted Data in logback
2021-12-17 20:00:50
osv
osv
Deserialization of Untrusted Data in logback
2021-12-17 20:00:50
CVE-2021-42550
2021-12-16 19:15:08
Moderate: Satellite 6.11 Release
2022-07-05 13:55:16
veracode
veracode
Remote Code Execution (RCE)
2021-12-19 14:25:25
cve
cve
CVE-2021-42550
2021-12-16 19:15:08
gitlab
gitlab
Deserialization of Untrusted Data
2021-12-17 00:00:00
broadcom
broadcom
BSA-2022-1675
2022-03-02 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : maven and recommended update for antlr3, minlog, sbt, xmvn (SUSE-SU-2023:2097-1)
2023-05-10 00:00:00
RHEL 7 / 8 : Satellite 6.11 Release (Moderate) (RHSA-2022:5498)
2024-04-28 00:00:00
Rocky Linux 8 : Satellite 6.11 Release (Moderate) (RLSA-2022:5498)
2023-11-06 00:00:00
nvd
nvd
CVE-2021-42550
2021-12-16 19:15:08
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2097-1)
2023-05-04 00:00:00
cnvd
cnvd
Quality Open Software logback remote code execution vulnerability
2021-12-19 00:00:00
ics
ics
Siemens SINEC Network Management System Logback Component
2022-11-10 12:00:00
debiancve
debiancve
CVE-2021-42550
2021-12-16 19:15:08
redhat
redhat
(RHSA-2022:1110) Moderate: Red Hat Decision Manager 7.12.1 security update
2022-03-29 13:12:15
(RHSA-2022:1108) Moderate: Red Hat Process Automation Manager 7.12.1 security update
2022-03-29 12:57:02
(RHSA-2022:5498) Moderate: Satellite 6.11 Release
2022-07-05 13:55:16
rocky
rocky
Satellite 6.11 Release
2022-07-05 13:55:16