CVE:CVE-2018-1285
CNNVD:CNNVD-202005-442
Apache log4net是美国阿帕奇（Apache）基金会的一款日志输出工具。
Apache log4net 2.0.8之前版本中log4net配置文件的解析过程存在代码问题漏洞。攻击者可借助特制XML内容利用该漏洞迫使系统接受任意配置文件。
solution:Upgrade apache log4net to a higher version than 2.0.10,and avoid the version (,2.0.10); Upgrade fedoraproject fedora to a higher version than 30,31,32,and avoid the version 30,31,32; Upgrade oracle application_testing_suite to a higher version than 13.3.0.1,and avoid the version 13.3.0.1; Upgrade oracle hospitality_opera_5 to a higher version than 5.5,5.6,and avoid the version 5.5,5.6; Upgrade oracle hospitality_simphony to a higher version than 18.2.7.2,19.1.3,and avoid the version 18.2.7.2,19.1.3; Upgrade netapp manageability_software_development_kit to a higher version than -; Upgrade netapp snapcenter to a higher version than -