PT-2020-9943 · Unisys · Unisys Stealth

Published 2020-02-03 · Updated 2020-04-09 · CVE-2019-18193

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Unisys Stealth (core) versions 3.4.108.0 through 3.4.108.0 Unisys Stealth (core) versions 3.4.209.x Unisys Stealth (core) versions 4.0.027.x through 4.0.027.12 Unisys Stealth (core) version 4.0.114

Description The issue involves key material being inadvertently logged under certain conditions.

Recommendations For Unisys Stealth (core) version 3.4.108.0, update to version 3.4.109. For Unisys Stealth (core) versions 3.4.209.x, update to a fixed version, as no specific fixed version is provided for this range. For Unisys Stealth (core) versions 4.0.027.x, update to version 4.0.027.13 or later. For Unisys Stealth (core) version 4.0.114, update to version 4.0.125 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2019-18193

Affected Products

Unisys Stealth

References · 4

• https://unisys.com/offerings/security-solutions/unisys-stealth-products-and-services · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-18193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18193 · Security Note
• https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=52 · Note