PT-2020-1562 · Juniper Networks · Junos Space
Published
2020-01-08
·
Updated
2021-07-21
·
CVE-2020-1611
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Juniper Networks Junos Space versions prior to 19.4R1
Description
A Local File Inclusion issue in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. The vulnerability is related to a lack of protection for internal data, which can be exploited by a remote attacker using specially crafted HTTP packets to gain unauthorized access to protected information.
Recommendations
For Juniper Networks Junos Space versions prior to 19.4R1, update to version 19.4R1 or later to resolve the issue. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Junos Space