Silver-peak

Unity Edgeconnect For Azure

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2020-12142

  • EPSS 0.3%
  • Published 05.05.2020 20:15:12
  • Last modified 21.11.2024 04:59:20

1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communicatio...

4.9

CVE-2020-12143

  • EPSS 0.09%
  • Published 05.05.2020 20:15:12
  • Last modified 21.11.2024 04:59:20

The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator.

4.9

CVE-2020-12144

  • EPSS 0.08%
  • Published 05.05.2020 20:15:12
  • Last modified 21.11.2024 04:59:21

The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal.