Password Storage Vulnerability in Unisys Stealth by Unisys
CVE-2020-24620

7.8HIGH

Key Information:

Vendor

Unisys

Status
Stealth
Vendor
CVE Published:
1 October 2020

What is CVE-2020-24620?

Unisys Stealth(core) prior to version 4.0.134 has a significant password storage vulnerability where sensitive credentials are stored in a recoverable format. This flawed approach allows users with access to the Enterprise Manager to potentially retrieve these passwords, increasing the risk of unauthorized access to systems.

References

https://public.support.unisys.com/common/public/vulnerabi...
x_refsource_MISC
https://public.support.unisys.com/common/public/vulnerabi...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.