Lucene search
PRIOn knowledge basePRION:CVE-2020-12146HistoryNov 05, 2020 - 7:15 p.m.
Design/Logic Flaw
2020-11-0519:15:00
PRIOn knowledge base
www.prio-n.com
1
In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API.
| CPE | Name | Operator | Version |
|---|---|---|---|
| unity_orchestrator | ge | 9.0 | |
| unity_orchestrator | lt | 9.0.1 | |
| unity_orchestrator | ge | 8.10 | |
| unity_orchestrator | lt | 8.10.11 | |
| unity_orchestrator | eq | < 8.9.11 |
Related
cvelist
cvelist
CVE-2020-12146 Silver Peak Unity OrchestratorTM subject to path traversal.
2020-10-31 00:00:00
cve
cve
CVE-2020-12146
2020-11-05 19:15:12
nvd
nvd
CVE-2020-12146
2020-11-05 19:15:12
threatpost
threatpost
Silver Peak SD-WAN Bugs Allow for Network Takeover
2020-11-11 21:04:06