Lucene search

K
cvelistNCSC.chCVELIST:CVE-2021-42550
HistoryDec 16, 2021 - 12:00 a.m.

CVE-2021-42550 RCE from attacker with configuration edit priviledges through JNDI lookup

2021-12-1600:00:00
CWE-502
NCSC.ch
raw.githubusercontent.com

7 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.1%

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.