CVE:CVE-2017-5929
CNNVD:CNNVD-201703-531
QOS.ch Logback是一套使用Java编写的日志框架。SocketServer和ServerSocketReceiver都是其中的调试模块。
QOS.ch Logback 1.1.10及之前的版本中的SocketServer和ServerSocketReceiver组件存在安全漏洞。攻击者可利用该漏洞获取提升的权限。
solution:Upgrade qos logback to a higher version than 1.2.0,and avoid the version (,1.2.0); Upgrade redhat satellite to a higher version than 6.4,and avoid the version 6.4; Upgrade redhat satellite_capsule to a higher version than 6.4,and avoid the version 6.4