PT-2019-1181 · Juniper Networks+1 · Juniper Atp Series+1

Published 2019-01-09 · Updated 2020-08-24 · CVE-2019-0029

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Juniper ATP Series versions prior to 5.0.3

Description The issue is related to the storage of credentials in a file that can be accessed by authenticated local users, potentially allowing an attacker to access the Splunk server. This could enable a remote attacker to elevate privileges and execute arbitrary code.

Recommendations For Juniper ATP Series versions prior to 5.0.3, update to version 5.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the file containing the logged credentials to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Insertion into Log File

Weakness Enumeration

CWE-798

CWE-532

Related Identifiers

BDU:2019-00248

CVE-2019-0029

Affected Products

Juniper Atp Series

Splunk Server

References · 6

• https://kb.juniper.net/JSA10918 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0029 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0029 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00248 · Security Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10918&cat=SIRT_1&actp=LIST · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10918&cat=SIRT_1&actp=LIST · Note