CVE-2020-12146

概要

参考情報

• silver-peak.com/support/user-documentation/security-advisories · Vendor Advisory

unity orchestrator のその他の脆弱性

• CVE-2020-12147高 8.8In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries …
• CVE-2020-12145緊急 9.8Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhos…
• CVE-2020-12144中 4.9The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to…
• CVE-2020-12143中 4.9The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TL…
• CVE-2020-12142中 4.91. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentia…