PT-2019-3481 · Juniper Networks · Junos Device Manager+1

Publicado 2019-10-09 · Atualizado 2020-08-24 · CVE-2019-0057

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.2R1, 18.2X75-D5.

Description An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager (JDM) application and take control of the system.

Recommendations For Juniper Networks Junos OS versions prior to 18.2R1, 18.2X75-D5, update to version 18.2R1 or 18.2X75-D5 or later to resolve the issue. As a temporary workaround, consider restricting access to the Junos Device Manager (JDM) application until a patch is available.

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

BDU:2019-03656

CVE-2019-0057

Produtos afetados

Junos

Junos Device Manager

Referências · 6

• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10955&cat=SIRT_1&actp=LIST · Nota
• https://osv.dev/vulnerability/CVE-2019-0057 · Aviso do Fabricante
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10955&cat=SIRT_1&actp=LIST · Nota
• https://bdu.fstec.ru/vul/2019-03656 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-0057 · Nota de Segurança
• https://kb.juniper.net/JSA10955 · Aviso do Fabricante