CVE-2021-42550: Netapp Cloud Manager

Medium severity, CVSS 6.6. EPSS: 4.8% chance of exploitation in the next 30 days.

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

Affected products

• Netapp Cloud Manager: affected versions not specified
• Netapp Service Level Manager: affected versions not specified
• Netapp Snap Creator Framework: affected versions not specified
• Qos Logback: up to and including 1.2.7; version 1.3.0 only
• Red Hat Satellite: version 6.0 only
• Siemens Sinec Nms: before 1.0.3 (fixed in 1.0.3)

Published 2021-12-16. Last modified 2026-06-17.