In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.
References
| Link | Resource |
|---|---|
| http://logback.qos.ch/news.html | Vendor Advisory |
| http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html | Exploit Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2022/Jul/11 | Mailing List Third Party Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-371761.pdf | Third Party Advisory |
| https://github.com/cn-panda/logbackRceDemo | Exploit Third Party Advisory |
| https://jira.qos.ch/browse/LOGBACK-1591 | Exploit Issue Tracking Patch Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20211229-0001/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
12 Dec 2022, 21:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-371761.pdf - Third Party Advisory | |
| CPE | cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:* |
08 Nov 2022, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| References | (FULLDISC) http://seclists.org/fulldisclosure/2022/Jul/11 - Mailing List, Third Party Advisory | |
| References | (MISC) http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html - Exploit, Third Party Advisory, VDB Entry |
22 Jul 2022, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Mar 2022, 16:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20211229-0001/ - Third Party Advisory | |
| CPE | cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:* |
29 Dec 2021, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 Dec 2021, 03:08
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:qos:logback:1.3.0:alpha2:*:*:*:*:*:* cpe:2.3:a:qos:logback:1.3.0:alpha3:*:*:*:*:*:* cpe:2.3:a:qos:logback:*:*:*:*:*:*:*:* cpe:2.3:a:qos:logback:1.3.0:alpha0:*:*:*:*:*:* cpe:2.3:a:qos:logback:1.3.0:alpha5:*:*:*:*:*:* cpe:2.3:a:qos:logback:1.3.0:alpha10:*:*:*:*:*:* cpe:2.3:a:qos:logback:1.3.0:alpha7:*:*:*:*:*:* cpe:2.3:a:qos:logback:1.3.0:alpha6:*:*:*:*:*:* cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:* cpe:2.3:a:qos:logback:1.3.0:alpha4:*:*:*:*:*:* cpe:2.3:a:qos:logback:1.3.0:alpha9:*:*:*:*:*:* cpe:2.3:a:qos:logback:1.3.0:alpha8:*:*:*:*:*:* cpe:2.3:a:qos:logback:1.3.0:alpha1:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 8.5
v3 : 6.6 |
| CWE | CWE-502 | |
| References | (MISC) https://github.com/cn-panda/logbackRceDemo - Exploit, Third Party Advisory | |
| References | (CONFIRM) http://logback.qos.ch/news.html - Vendor Advisory | |
| References | (MISC) https://jira.qos.ch/browse/LOGBACK-1591 - Exploit, Issue Tracking, Patch, Third Party Advisory |
16 Dec 2021, 20:05
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-12-16 19:15
Updated : 2024-02-04 22:08
NVD link : CVE-2021-42550
Mitre link : CVE-2021-42550
CVE.ORG link : CVE-2021-42550
JSON object : View
Products Affected
redhat
- satellite
netapp
- snap_creator_framework
- cloud_manager
- service_level_manager
siemens
- sinec_nms
qos
- logback
CWE
CWE-502
Deserialization of Untrusted Data