What is CVE-2021-43394?

CVE-2021-43394 is a critical-severity vulnerability in Unisys Clearpath 2200, classified under Improper Authentication. CVSS score: 9.8/10. Published 2022-01-24.

How severe is CVE-2021-43394?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Unisys Clearpath 2200

CVE-2021-43394

Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of an Authentication Algorithm. An LDAP password is not properly validated.

Vulnerability class: Broken Authentication

EPSS: 0.012 (64.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Unisys Clearpath_2200
Unisys Messaging_integration_services — versions 7r3b_ic3, 7r3b_ic4, 7r3c
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-43394?: CVE-2021-43394 is a critical-severity vulnerability in Unisys Clearpath 2200, classified under Improper Authentication. CVSS score: 9.8/10. Published 2022-01-24.
How severe is CVE-2021-43394?: Critical severity. CVSS v3 base score is 9.8 out of 10.