PT-2017-8608 · Juniper Networks · Junos

Publicado 2017-10-13 · Atualizado 2019-10-09 · CVE-2016-4924

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 15.1 prior to 15.1F5 Juniper Networks Junos OS versions 14.1 prior to 14.1R8

Description An issue in Juniper Networks Junos OS on vMX allows local unprivileged users on a host system to have read access to vMX or vPFE images. This access can lead to the exposure of sensitive information, including private cryptographic keys. The issue was discovered during internal product security testing, and there is no known case of malicious exploitation.

Recommendations For Juniper Networks Junos OS versions 15.1 prior to 15.1F5, update to version 15.1F5 or later. For Juniper Networks Junos OS versions 14.1 prior to 14.1R8, update to version 14.1R8 or later.

Correção

Enumeração de Fraquezas

CWE-275

Identificadores relacionados

CVE-2016-4924

Produtos afetados

Junos

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-4924 · Aviso do Fabricante
• https://kb.juniper.net/JSA10766 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4924 · Nota de Segurança
• http://securityfocus.com/bid/93531 · Nota