UCC Edge: Logback Vulnerability False Positive (CVE-2021-42550)
摘要: This article provides a list of security vulnerabilities that cannot be exploited on Dell UCC Edge 2.0.2, but which may be identified by security scanners.
本文章適用於
本文章不適用於
本文無關於任何特定產品。
本文未識別所有產品版本。
安全性文章類型
Security KB
CVE 識別碼
CVE-2021-42550
問題摘要
See the 'Recommendation' section below for details on each CVE.
建議
The vulnerabilities listed in the table below are in order by the date on which UCC Edge Engineering determined that the UCC Edge 2.0.2 was not vulnerable.
| Third-party Component | CVE ID | Summary of Vulnerability | Reason why Product is not Vulnerable | Date Determined False Positive |
| Logback | CVE-2021-42550 | In Logback version 1.2.7 and earlier versions, an attacker with the required privileges to edit configurations files may potentially craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers. | Logback 1.2.3 is used in our released product of UCC Edge 2.0.2 but the application is not using any configuration file for Logback, which makes it not possible to exploit this vulnerability. | 2022-01-19 |
法律免責聲明
受影響的產品
UCC Edge產品
Product Security Information文章屬性
文章編號: 000195400
文章類型: Security KB
上次修改時間: 19 9月 2025
版本: 2
向其他 Dell 使用者尋求您問題的答案
支援服務
檢查您的裝置是否在支援服務的涵蓋範圍內。