PT-2020-9960 · Unisys · Unisys Clearpath Forward Libra+1

Published 2020-01-07 · Updated 2021-07-21 · CVE-2019-18386

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Unisys ClearPath Forward Libra and ClearPath MCP Software Series (affected versions not specified)

Description: The issue concerns systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series, which can fault and have other unspecified impact when receiving specifically crafted message payloads over a systems management communication channel.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-18386

Affected Products

Clearpath Mcp Software Series

Unisys Clearpath Forward Libra

References · 2

• https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=53 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18386 · Security Note