Lucene search

MitreCVE-2021-43394

HistoryJan 24, 2022 - 10:15 p.m.

CVE-2021-43394

2022-01-2422:15:07

CWE-287

mitre

web.nvd.nist.gov

unisys

os 2200

messaging

ntsi

7r3b

ic3

ic4

7r3c

7r3d

ldap

authentication

algorithm

vulnerability

cve-2021-43394

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

68.9%

JSON

Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of an Authentication Algorithm. An LDAP password is not properly validated.

Affected configurations

Nvd

Node

unisysmessaging_integration_servicesMatch7r3b_ic3

unisysmessaging_integration_servicesMatch7r3b_ic4

unisysmessaging_integration_servicesMatch7r3c

unisysmessaging_integration_servicesMatch7r3d

AND

unisysclearpath_2200Match-

VendorProductVersionCPE
unisysmessaging_integration_services7r3b_ic3cpe:2.3:a:unisys:messaging_integration_services:7r3b_ic3:*:*:*:*:*:*:*
unisysmessaging_integration_services7r3b_ic4cpe:2.3:a:unisys:messaging_integration_services:7r3b_ic4:*:*:*:*:*:*:*
unisysmessaging_integration_services7r3ccpe:2.3:a:unisys:messaging_integration_services:7r3c:*:*:*:*:*:*:*
unisysmessaging_integration_services7r3dcpe:2.3:a:unisys:messaging_integration_services:7r3d:*:*:*:*:*:*:*
unisysclearpath_2200-cpe:2.3:o:unisys:clearpath_2200:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
unisys	messaging_integration_services	7r3b_ic3	cpe:2.3:a:unisys:messaging_integration_services:7r3b_ic3:::::::*
unisys	messaging_integration_services	7r3b_ic4	cpe:2.3:a:unisys:messaging_integration_services:7r3b_ic4:::::::*
unisys	messaging_integration_services	7r3c	cpe:2.3:a:unisys:messaging_integration_services:7r3c:::::::*
unisys	messaging_integration_services	7r3d	cpe:2.3:a:unisys:messaging_integration_services:7r3d:::::::*
unisys	clearpath_2200	-	cpe:2.3:o:unisys:clearpath_2200:-:::::::*

References

public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=66

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

68.9%

JSON

Related for CVE-2021-43394