PT-2017-15369 · Juniper Networks · Junos

Publicado 2017-07-14 · Atualizado 2019-10-09 · CVE-2017-2341

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions 14.1X53 prior to 14.1X53-D40 Junos OS versions 15.1 prior to 15.1R5 Junos OS versions 15.1X49 prior to 15.1X49-D70 Junos OS versions 16.1 prior to 16.1R2

Description An insufficient authentication issue may allow unprivileged users on the Junos OS instance to gain access to the host operating environment, thus escalating privileges.

Recommendations For Junos OS versions 14.1X53 prior to 14.1X53-D40, update to version 14.1X53-D40 or later. For Junos OS versions 15.1 prior to 15.1R5, update to version 15.1R5 or later. For Junos OS versions 15.1X49 prior to 15.1X49-D70, update to version 15.1X49-D70 or later. For Junos OS versions 16.1 prior to 16.1R2, update to version 16.1R2 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-2341

Produtos afetados

Junos

Referências · 4

• http://securitytracker.com/id/1038893 · Nota
• https://osv.dev/vulnerability/CVE-2017-2341 · Aviso do Fabricante
• https://kb.juniper.net/JSA10787 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-2341 · Nota de Segurança