CVE-2021-42550

CVE-2021-42550 is a medium-severity vulnerability in Logback versions 1.2.7 and earlier, allowing an authenticated attacker with configuration file edit privileges to achieve arbitrary code execution via malicious LDAP server configurations. This affects products from vendors like NetApp, Red Hat, and Siemens. The CVSS score of 6.6 indicates a network-based attack with high complexity, requiring high privileges, but leading to high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, often being compared to Log4j vulnerabilities.