CVE Vulnerabilities

CVE-2021-43394

Improper Authentication

Published: Jan 24, 2022 | Modified: Jan 31, 2022
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of an Authentication Algorithm. An LDAP password is not properly validated.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Messaging_integration_services Unisys 7r3b_ic3 (including) 7r3b_ic3 (including)
Messaging_integration_services Unisys 7r3b_ic4 (including) 7r3b_ic4 (including)
Messaging_integration_services Unisys 7r3c (including) 7r3c (including)
Messaging_integration_services Unisys 7r3d (including) 7r3d (including)

Potential Mitigations

References