CVE-2020-12147

Mô tả

Tham khảo

• silver-peak.com/support/user-documentation/security-advisories · Vendor Advisory

Lỗ hổng khác của unity orchestrator

• CVE-2020-12146CAO 8.8In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restr…
• CVE-2020-12145NGHIÊM TRỌNG 9.8Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhos…
• CVE-2020-12144TRUNG BÌNH 4.9The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to…
• CVE-2020-12143TRUNG BÌNH 4.9The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TL…
• CVE-2020-12142TRUNG BÌNH 4.91. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentia…