UCC Edge: Logback Vulnerability False Positive (CVE-2021-42550)
Sammanfattning: This article provides a list of security vulnerabilities that cannot be exploited on Dell UCC Edge 2.0.2, but which may be identified by security scanners.
Den här artikeln gäller för
Den här artikeln gäller inte för
Den här artikeln är inte kopplad till någon specifik produkt.
Alla produktversioner identifieras inte i den här artikeln.
Typ av säkerhetsartikel
Security KB
CVE-identifierare
CVE-2021-42550
Problemsammanfattning
See the 'Recommendation' section below for details on each CVE.
Rekommendationer
The vulnerabilities listed in the table below are in order by the date on which UCC Edge Engineering determined that the UCC Edge 2.0.2 was not vulnerable.
| Third-party Component | CVE ID | Summary of Vulnerability | Reason why Product is not Vulnerable | Date Determined False Positive |
| Logback | CVE-2021-42550 | In Logback version 1.2.7 and earlier versions, an attacker with the required privileges to edit configurations files may potentially craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers. | Logback 1.2.3 is used in our released product of UCC Edge 2.0.2 but the application is not using any configuration file for Logback, which makes it not possible to exploit this vulnerability. | 2022-01-19 |
Juridisk friskrivning
Berörda produkter
UCC EdgeProdukter
Product Security InformationArtikelegenskaper
Artikelnummer: 000195400
Artikeltyp: Security KB
Senast ändrad: 19 sep. 2025
Version: 2
Få svar på dina frågor från andra Dell-användare
Supporttjänster
Kontrollera om din enhet omfattas av supporttjänster.