vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2021-42550

RCE from attacker with configuration edit priviledges through JNDI lookup

MEDIUM
6.6
CVSS Score
Published: December 16, 2021 at 12:00 AM UTC
Updated: June 17, 2026 at 04:09 AM UTC
7 products affected across 5 vendorsSatelliteSINEC NMSSnap Creator Framework

Using logback by QOS.ch?

Get instant alerts when new vulnerabilities affect logback - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.6
Exploit prediction
EPSS 5%

Description

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Cloud Manager· NetApp
95%
All versions
Service Level Manager· NetApp
95%
All versions
Snap Creator Framework· NetAppdrupal
95%
All versions
Logback· Qos
95%
v ≤ 1.2.71.3.0 alpha01.3.0 alpha11.3.0 alpha101.3.0 alpha21.3.0 alpha31.3.0 alpha41.3.0 alpha51.3.0 alpha61.3.0 alpha71.3.0 alpha81.3.0 alpha9
Satellite· Red Hatrpm
95%
6.0
SINEC NMS· Siemens
95%
v < 1.0.3
Affected range stops below 1.0.3, so it looks safe — our inference, not a vendor statement
Logback· Qos Ch
60%
v < 1.2.9v < 1.3.0-alpha11
Affected range stops below 1.2.9, so it looks safe — our inference, not a vendor statement
Affected range stops below 1.3.0-alpha11, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (7)

Vendor Advisory
Source: [email protected]
http://logback.qos.ch/news.html
ExploitThird Party AdvisoryVDB Entry
Source: [email protected]
http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html
Mailing ListThird Party Advisory
Source: [email protected]
http://seclists.org/fulldisclosure/2022/Jul/11
Third Party Advisory
Source: [email protected]
https://cert-portal.siemens.com/productcert/pdf/ssa-371761.pdf
ExploitThird Party Advisory
Source: [email protected]
https://github.com/cn-panda/logbackRceDemo
ExploitIssue TrackingPatchThird Party Advisory
Source: [email protected]
https://jira.qos.ch/browse/LOGBACK-1591
Third Party Advisory
Source: [email protected]
https://security.netapp.com/advisory/ntap-20211229-0001/

CVSS

6.6MEDIUMNCSC.ch
Attack Vector
NETWORK
Complexity
HIGH
Privileges
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-502

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card