5.1

CVE-2013-4689

J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version <= 10.4
Juniper ≫ Junos Version 4.0
Juniper ≫ Junos Version 4.1
Juniper ≫ Junos Version 4.2
Juniper ≫ Junos Version 4.3
Juniper ≫ Junos Version 4.4
Juniper ≫ Junos Version 5.0
Juniper ≫ Junos Version 5.1
Juniper ≫ Junos Version 5.2
Juniper ≫ Junos Version 5.3
Juniper ≫ Junos Version 5.4
Juniper ≫ Junos Version 5.5
Juniper ≫ Junos Version 5.6
Juniper ≫ Junos Version 5.7
Juniper ≫ Junos Version 6.0
Juniper ≫ Junos Version 6.1
Juniper ≫ Junos Version 6.2
Juniper ≫ Junos Version 6.3
Juniper ≫ Junos Version 6.4
Juniper ≫ Junos Version 7.0
Juniper ≫ Junos Version 7.1
Juniper ≫ Junos Version 7.2
Juniper ≫ Junos Version 7.3
Juniper ≫ Junos Version 7.4
Juniper ≫ Junos Version 7.5
Juniper ≫ Junos Version 7.6
Juniper ≫ Junos Version 8.0
Juniper ≫ Junos Version 8.1
Juniper ≫ Junos Version 8.2
Juniper ≫ Junos Version 8.3
Juniper ≫ Junos Version 8.4
Juniper ≫ Junos Version 9.0
Juniper ≫ Junos Version 9.1
Juniper ≫ Junos Version 9.2
Juniper ≫ Junos Version 9.4
Juniper ≫ Junos Version 9.5
Juniper ≫ Junos Version 9.6
Juniper ≫ Junos Version 11.4
Juniper ≫ Junos Version 12.1
Juniper ≫ Junos Version 12.1x44
Juniper ≫ Junos Version 12.1x45
Juniper ≫ Junos Version 12.2
Juniper ≫ Junos Version 12.3
Juniper ≫ Junos Version 13.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.98% 0.575
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597
Vendor Advisory
http://osvdb.org/98325
http://secunia.com/advisories/55166
Vendor Advisory
http://www.securityfocus.com/bid/62940