248 matches found
CVE-2021-3141
In Unisys Stealth (core), versions prior to 6.0.025.0 are affected. The Keycloak password is stored in a recoverable format, which a local attacker could potentially access and use to gain access to the Management Server and modify the Stealth configuration. This represents a local-privilege path...
unisys stealth(core) 安全漏洞
The unisys stealthcore is a firewall from Unisys. This firewall is easy to configure and expand, can be upgraded by micro-segmentation, and fully protects internal data security. Unisys Stealth core version 6.0.025.0 previously contained a security vulnerability that could be exploited by a local...
Unspecified Vulnerability in Unisys Stealth (core)
The unisys stealthcore is a firewall from Unisys. This firewall is easy to configure and expand, can be upgraded by micro-segmentation, and fully protects internal data security. A security vulnerability exists in Unisys Stealthcore versions prior to 4.0.134 that stems from storing passwords in a...
CVE-2020-24620
Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...
CVE-2020-24620
Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...
CVE-2020-24620
Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...
Format string
Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...
CVE-2020-24620
Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...
CVE-2020-24620
Unisys Stealth(core) before version 4.0.134 stores passwords in a recoverable format, enabling credential exposure via an Enterprise Manager search. Affected component: Unisys Stealth(core); Root cause: insecure, recoverable password storage. Impact stated: credentials may be revealed. Public det...
CVE-2020-12053
In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key...
CVE-2020-12053
In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key...
Authorization
In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key...
CVE-2020-12053
In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key...
CVE-2020-12053
In Unisys Stealth, versions 3.4.x, 4.x and 5.x prior to 5.0.026 expose a vulnerability where certificate-based authorization can occur without HTTPS, potentially allowing an endpoint to be authorized without proving a private key. The issue is documented in CVE-2020-12053 with a context that the ...
CVE-2020-12647
Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit invalid code sequences under rare circumstances related to syntax. The resulting code could, for example, trigger a system fault or adversely affect confidentiality, integrity, and availability...
Code injection
Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit invalid code sequences under rare circumstances related to syntax. The resulting code could, for example, trigger a system fault or adversely affect confidentiality, integrity, and availability...
CVE-2020-12647
Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit invalid code sequences under rare circumstances related to syntax. The resulting code could, for example, trigger a system fault or adversely affect confidentiality, integrity, and availability...
CVE-2020-12647
The CVE-2020-12647 entry affects Unisys ALGOL Compiler versions 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5. The issue is that the compiler can emit invalid code sequences under rare syntax-related conditions, potentially leading to a system fault and impacts to confidentia...