« Volver al listado

CVE-2021-43394

Estado: ModificadaCrítica (9.8)—

Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of an Authentication Algorithm. An LDAP password is not properly validated.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Unisys — Messaging Integration Services

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-43394",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-01-24T22:15:07.763",
  "references": [
    {
      "url": "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=66",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=66",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of an Authentication Algorithm. An LDAP password is not properly validated."
    },
    {
      "lang": "es",
      "value": "Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 e IC4, 7R3C y 7R3D, presenta una implementación incorrecta de un algoritmo de autenticación. Una contraseña LDAP no es comprobada apropiadamente"
    }
  ],
  "lastModified": "2026-06-17T04:10:54.443",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:unisys:messaging_integration_services:7r3b_ic3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "150FE069-6A9A-4DD2-B731-EA463CD3CBA9"
            },
            {
              "criteria": "cpe:2.3:a:unisys:messaging_integration_services:7r3b_ic4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BFDB748-BF0B-448B-B00C-9779030B283E"
            },
            {
              "criteria": "cpe:2.3:a:unisys:messaging_integration_services:7r3c:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2A9928F-71D5-4B14-821F-540991BB9FB8"
            },
            {
              "criteria": "cpe:2.3:a:unisys:messaging_integration_services:7r3d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF903B1E-4FF0-43F5-A014-F59300BF9BD6"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:unisys:clearpath_2200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "35EEA506-EF7F-40B5-8580-A342F51C98F3"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}