| Package | Affected versions | Patched versions |
|---|---|---|
| ch.qos.logback:logback-core | < 1.2.9 | 1.2.9 |
| logback | = 1.3.0≤ 1.2.7 | |
| satellite | = 6.0 | |
| sinec nms | < 1.0.3 | 1.0.3 |
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free