CVE-2021-42550: RCE from attacker with configuration edit priviledges through JNDI lookup
A flaw was found in the logback package. When using a specially-crafted configuration, this issue could allow a remote authenticated attacker to execute arbitrary code loaded from LDAP servers.
Other sources
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.
Affected Software
Remediation
Patch Available
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2021-42550?
CVE-2021-42550 is a vulnerability found in the logback package that allows an attacker to execute arbitrary code loaded from LDAP servers.
What is the severity of CVE-2021-42550?
CVE-2021-42550 has a severity level of high.
Which versions of logback are affected by CVE-2021-42550?
Logback versions 1.2.7 and prior are affected by CVE-2021-42550.
How can I fix CVE-2021-42550?
To fix CVE-2021-42550, upgrade to logback version 1.2.9 or higher.
Where can I find more information about CVE-2021-42550?
You can find more information about CVE-2021-42550 at the following references: [CVE-2021-42550](https://cve.report/CVE-2021-42550), [LOGBACK-1591](https://jira.qos.ch/browse/LOGBACK-1591), [RHSA-2022:1108](https://access.redhat.com/errata/RHSA-2022:1108).