CVEvulnerability

CVE-2021-43394

9.8 CRITICAL Published 2022-01-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-01-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of an Authentication Algorithm. An LDAP password is not properly validated.

Affected configurations

• unisys messaging integration services 7r3b ic3 • unisys messaging integration services 7r3b ic4 • unisys messaging integration services 7r3c • unisys messaging integration services 7r3d

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References