CVE-2020-12147
Published Nov 5, 2020In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchestrator database using…
Vendor/product archive
silver-peak / unity_orchestrator CVEs
Beta · best-effort6 CVEs tagged to silver-peak / unity_orchestrator — 0 Critical, 0 High, 6 Medium, 0 Low, 0 Unrated.
CVE-2020-12146
Published Nov 5, 2020In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server…
CVE-2020-12145
Published Nov 5, 2020Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhost. This makes it possible to log in to…
CVE-2020-12144
Published May 5, 2020The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeCo…
CVE-2020-12143
Published May 5, 2020The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an unt…
CVE-2020-12142
Published May 5, 20201. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required syst…
Showing 1-6 of 6 CVEsPage 1 of 1