CVE-2020-12143

Mô tả

Tham khảo

• silver-peak.com/sites/default/files/advisory/security_advisory_notice_rogue_orchestrator-cve_2020_12143.pdf · Vendor Advisory

Lỗ hổng khác của unity orchestrator

• CVE-2020-12147CAO 8.8In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries …
• CVE-2020-12146CAO 8.8In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restr…
• CVE-2020-12145NGHIÊM TRỌNG 9.8Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhos…
• CVE-2020-12144TRUNG BÌNH 4.9The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to…
• CVE-2020-12142TRUNG BÌNH 4.91. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentia…