In Unisys Stealth (core) before 6.0.025.0, the Keycloak password is stored in a recoverable format that might be accessible by a local attacker, who could gain access to the Management Server and change the Stealth configuration.
References
Link | Resource |
---|---|
https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=62 | Vendor Advisory |
Configurations
Information
Published : 2021-03-17 22:15
Updated : 2021-03-25 09:33
NVD link : CVE-2021-3141
Mitre link : CVE-2021-3141
JSON object : View
CWE
CWE-522
Insufficiently Protected Credentials
Products Affected
unisys
- stealth