CVSS 3.1
6.6 mediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2021-42550
Medium (6.6). EPSS 4.8% chance of exploitation in the next 30 days. Fixed in ch.qos.logback:logback-core 1.2.9.
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.
Severity
- EPSS
- 4.8% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-502
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netapp:cloud_manager
- netapp:service_level_manager
- netapp:snap_creator_framework
- qos:logback
- redhat:satellite
- siemens:sinec_nms
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-668q-qrv7-99fm | Maven | ch.qos.logback:logback-core | <1.2.9 | 1.2.9 |