Lucene search
Veracode Vulnerability DatabaseVERACODE:33387HistoryDec 19, 2021 - 2:25 p.m.
Remote Code Execution (RCE)
2021-12-1914:25:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.016 Low
EPSS
Percentile
87.3%
logback is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of write access allowing an attacker to craft a malicious configuration.
References
logback.qos.ch/news.html
packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html
seclists.org/fulldisclosure/2022/Jul/11
cert-portal.siemens.com/productcert/pdf/ssa-371761.pdf
github.com/advisories/GHSA-668q-qrv7-99fm
github.com/cn-panda/logbackRceDemo
jira.qos.ch/browse/LOGBACK-1591
security.netapp.com/advisory/ntap-20211229-0001/
Related
ubuntucve
ubuntucve
CVE-2021-42550
2021-12-16 00:00:00
redhatcve
redhatcve
CVE-2021-42550
2021-12-17 09:49:50
atlassian
atlassian
Upgrade Logback for CVE-2021-42550
2021-12-17 19:03:40
Upgrade Logback for CVE-2021-42550
2021-12-17 19:03:40
cvelist
cvelist
ibm
ibm
f5
f5
K97521840 : logback vulnerability CVE-2021-42550
2022-01-05 00:00:00
github
github
Deserialization of Untrusted Data in logback
2021-12-17 20:00:50
gitlab
gitlab
Deserialization of Untrusted Data
2021-12-17 00:00:00
cve
cve
CVE-2021-42550
2021-12-16 19:15:08
osv
osv
Deserialization of Untrusted Data in logback
2021-12-17 20:00:50
CVE-2021-42550
2021-12-16 19:15:08
Moderate: Satellite 6.11 Release
2022-07-05 13:55:16
broadcom
broadcom
BSA-2022-1675
2022-03-02 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : maven and recommended update for antlr3, minlog, sbt, xmvn (SUSE-SU-2023:2097-1)
2023-05-10 00:00:00
RHEL 7 / 8 : Satellite 6.11 Release (Moderate) (RHSA-2022:5498)
2024-04-28 00:00:00
Rocky Linux 8 : Satellite 6.11 Release (Moderate) (RLSA-2022:5498)
2023-11-06 00:00:00
nvd
nvd
CVE-2021-42550
2021-12-16 19:15:08
prion
prion
Design/Logic Flaw
2021-12-16 19:15:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2097-1)
2023-05-04 00:00:00
cnvd
cnvd
Quality Open Software logback remote code execution vulnerability
2021-12-19 00:00:00
ics
ics
Siemens SINEC Network Management System Logback Component
2022-11-10 12:00:00
debiancve
debiancve
CVE-2021-42550
2021-12-16 19:15:08
redhat
redhat
(RHSA-2022:1110) Moderate: Red Hat Decision Manager 7.12.1 security update
2022-03-29 13:12:15
(RHSA-2022:1108) Moderate: Red Hat Process Automation Manager 7.12.1 security update
2022-03-29 12:57:02
(RHSA-2022:5498) Moderate: Satellite 6.11 Release
2022-07-05 13:55:16
rocky
rocky
Satellite 6.11 Release
2022-07-05 13:55:16