CVE-2020-24620

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-10-01 · updated 2026-06-17
Weakness: CWE-798

Description

Unisys Stealth(core) before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials.

Affected products

Unisys Stealth: before 4.0.134 — fixed in 4.0.134

How to fix

Upgrade to a fixed version: Unisys Stealth 4.0.134. Check the vendor advisory for mitigations.

References

https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=56
https://public.support.unisys.com/common/public/vulnerability/NVD_Home.aspx
https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=56
https://public.support.unisys.com/common/public/vulnerability/NVD_Home.aspx

Get alerted when CVE-2020-24620 or the next vulnerability affects your stack