In Unisys Stealth (core) 3.4.108.0, 3.4.209.x, 4.0.027.x and 4.0.114, key material inadvertently logged under certain conditions. Fixed included in 3.4.109, 4.0.027.13, 4.0.125 and 5.0.013.0.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Stealth | Unisys | 3.4.108.0 (including) | 3.4.108.0 (including) |
| Stealth | Unisys | 3.4.209.0 (including) | 3.4.209.0 (including) |
| Stealth | Unisys | 4.0.027.0 (including) | 4.0.027.0 (including) |
| Stealth | Unisys | 4.0.114 (including) | 4.0.114 (including) |
Potential Mitigations
Related Attack Patterns
References
- https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=52
- https://www.unisys.com/offerings/security-solutions/unisys-stealth-products-and-services
- https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=52
- https://www.unisys.com/offerings/security-solutions/unisys-stealth-products-and-services