PT-2019-3481 · Juniper Networks · Junos Device Manager+1

Published 2019-10-09 · Updated 2020-08-24 · CVE-2019-0057

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.2R1, 18.2X75-D5.

Description An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager (JDM) application and take control of the system.

Recommendations For Juniper Networks Junos OS versions prior to 18.2R1, 18.2X75-D5, update to version 18.2R1 or 18.2X75-D5 or later to resolve the issue. As a temporary workaround, consider restricting access to the Junos Device Manager (JDM) application until a patch is available.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

BDU:2019-03656

CVE-2019-0057

Affected Products

Junos

Junos Device Manager

References · 6

• https://osv.dev/vulnerability/CVE-2019-0057 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03656 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-0057 · Security Note
• https://kb.juniper.net/JSA10955 · Vendor Advisory
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10955&cat=SIRT_1&actp=LIST · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10955&cat=SIRT_1&actp=LIST · Note