PT-2018-8561 · Juniper Networks · Junos Space Security Director

Published 2018-01-10 · Updated 2019-10-03 · CVE-2018-0010

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Junos Space Security Director versions prior to 17.2R1

Description: A vulnerability in the Juniper Networks Junos Space Security Director allows unauthorized SSH access to a device by reusing a URL created for another user.

Recommendations: For versions prior to 17.2R1, update to version 17.2R1 or later to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2018-0010

Affected Products

Junos Space Security Director

References · 3

• https://kb.juniper.net/JSA10840 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0010 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0010 · Security Note