Approved changes feed: RSS · Atom

cpe:2.3:a:unisys:stealth:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnisys (a61f019b-8431-5c19-a96b-cedbb9bdf26d)
ProductStealth (fdd6c631-2746-5ab7-a536-ec7899b57061)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3141 vulnerable 2026-06-03 14:45:10.156398 Details available
In Unisys Stealth (core) before 6.0.025.0, the Keycloak password is stored in a recoverable format that might be accessible by a local attacker, who could gain access to the Management Server and change the Stealth configuration.
Published: 2021-03-18T04:03:39.000Z
Updated: 2024-08-03T16:45:51.259Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35056 vulnerable 2026-06-03 14:44:48.884244 Details available
Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task. An unintended executable might run.
Published: 2021-07-15T18:14:39.000Z
Updated: 2024-08-04T00:33:50.929Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28492 vulnerable 2026-06-03 14:44:18.346351 Details available
Unisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format.
Published: 2021-04-20T13:01:22.000Z
Updated: 2024-08-03T21:47:32.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24620 vulnerable 2026-06-03 14:42:07.832771 Details available
Unisys Stealth(core) before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials.
Published: 2020-10-01T16:25:48.000Z
Updated: 2024-08-04T15:19:07.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12053 vulnerable 2026-06-03 14:41:33.215869 Details available
In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key.
Published: 2020-06-22T19:53:58.000Z
Updated: 2024-08-04T11:48:57.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6592 vulnerable 2026-06-03 14:39:00.561041 Details available
Unisys Stealth 3.3 Windows endpoints before 3.3.016.1 allow local users to gain access to Stealth-enabled devices by leveraging improper cleanup of memory used for negotiation key storage.
Published: 2018-02-19T19:00:00.000Z
Updated: 2024-08-05T06:10:10.381Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.