CVE-2020-12053 : Security Advisory and Response

Unisys Stealth 3.4.x, 4.x, and 5.x before 5.0.026 allows unauthorized endpoint access without a private key when using certificate-based authorization without HTTPS.

Understanding CVE-2020-12053

In Unisys Stealth versions prior to 5.0.026, a vulnerability exists that could lead to unauthorized access to endpoints.

What is CVE-2020-12053?

The vulnerability in Unisys Stealth versions 3.4.x, 4.x, and 5.x before 5.0.026 allows endpoints to be authorized without the necessary private key when utilizing certificate-based authorization without HTTPS.

The Impact of CVE-2020-12053

This vulnerability could potentially result in unauthorized access to sensitive endpoints, compromising the security and integrity of the system.

Technical Details of CVE-2020-12053

Unpacking the technical aspects of the vulnerability.

Vulnerability Description

The issue arises in Unisys Stealth versions 3.4.x, 4.x, and 5.x before 5.0.026, where certificate-based authorization can occur without the required HTTPS, enabling unauthorized endpoint access.

Affected Systems and Versions

Unisys Stealth 3.4.x
Unisys Stealth 4.x
Unisys Stealth 5.x before 5.0.026

Exploitation Mechanism

The vulnerability allows threat actors to bypass private key authentication, potentially gaining unauthorized access to critical endpoints.

Mitigation and Prevention

Guidelines to address and prevent the CVE-2020-12053 vulnerability.

Immediate Steps to Take

Implement HTTPS for all certificate-based authorizations in Unisys Stealth.
Regularly monitor and audit endpoint access for any unauthorized activity.
Apply the latest security patches and updates from Unisys.

Long-Term Security Practices

Conduct regular security training for personnel on best practices for endpoint security.
Employ network segmentation to limit the impact of potential unauthorized access.

Patching and Updates

Ensure all Unisys Stealth installations are updated to version 5.0.026 or newer to mitigate the vulnerability.