CVE-2021-43394

Published: Jan 24, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of an Authentication Algorithm. An LDAP password is not properly validated.

Affected (4)

Products: Unisys: Messaging Integration Services

Unisys

1 product

Messaging Integration Services

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Unisys Messaging Integration Services	Version 7r3b_ic3
Unisys Messaging Integration Services	Version 7r3b_ic4
Unisys Messaging Integration Services	Version 7r3c
Unisys Messaging Integration Services	Version 7r3d

Running on/with	Platform Versions
Unisys Clearpath 2200	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=66

Source: cve@mitre.org

Vendor Advisory

https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=66

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.