Silver-Peak Unity Orchestrator
6 CVEs affecting Silver-Peak Unity Orchestrator. Latest disclosed: 2020-11-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-12147 | Medium | 6.6 | 2020-11-05 | In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchest… |
CVE-2020-12146 | Medium | 6.6 | 2020-11-05 | In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the… |
CVE-2020-12145 | Medium | 6.6 | 2020-11-05 | Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhost. This makes it po… |
CVE-2020-12144 | Medium | 6.0 | 2020-05-05 | The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS co… |
CVE-2020-12143 | Medium | 6.0 | 2020-05-05 | The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from E… |
CVE-2020-12142 | Medium | 4.8 | 2020-05-05 | 1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, wi… |