CVE-2020-12144

概要

参考情報

• silver-peak.com/sites/default/files/advisory/security_advisory_notice_rogue_portal-cve_2020_12144.pdf · Vendor Advisory

unity orchestrator のその他の脆弱性

• CVE-2020-12147高 8.8In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries …
• CVE-2020-12146高 8.8In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restr…
• CVE-2020-12145緊急 9.8Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhos…
• CVE-2020-12143中 4.9The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TL…
• CVE-2020-12142中 4.91. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentia…