CVE:CVE-2021-42550
CNNVD:CNNVD-202112-1415
Quality Open Software Logback是瑞士Quality Open Software公司的一个 Java 应用程序的日志记录框架。
Quality Open Software logback 1.2.7及之前版本存在代码问题漏洞，攻击者可利用该漏洞精心设计恶意配置，从而允许执行从LDAP服务器加载的任意代码。
solution:Upgrade qos logback to a higher version than 1.2.7,1.3.0:alpha0,1.3.0:alpha1,1.3.0:alpha10,1.3.0:alpha2,1.3.0:alpha3,1.3.0:alpha4,1.3.0:alpha5,1.3.0:alpha6,1.3.0:alpha7,1.3.0:alpha8,1.3.0:alpha9,and avoid the version (,1.2.7],1.3.0:alpha0,1.3.0:alpha1,1.3.0:alpha10,1.3.0:alpha2,1.3.0:alpha3,1.3.0:alpha4,1.3.0:alpha5,1.3.0:alpha6,1.3.0:alpha7,1.3.0:alpha8,1.3.0:alpha9; Upgrade redhat satellite to a higher version than 6.0,and avoid the version 6.0; Upgrade netapp cloud_manager to a higher version than -; Upgrade netapp service_level_manager to a higher version than -; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade siemens sinec_nms to a higher version than 1.0.3,and avoid the version (,1.0.3)