Skip to content
OpenAdvisories
Medium · 6.6 CVE-2020-12147 EUVD-2020-4462GHSA-vxmf-fxwp-m3ww

Unauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database.

Published Nov 5, 2020 · Updated Sep 16, 2024 · Assigned by Silver Peak

Vendor: Silver Peak Systems Product: Unity Orchestrator

Description

In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchestrator database using the /sqlExecution REST API, which had been used for internal testing.

Affected products

VendorProductAffectedFixed
Silver Peak Systems Unity Orchestrator All versions affected prior to Silver Peak Unity Orchestrator 8.9.11+, 8.10.11+, or 9.0.1+. —

References