5.5

CVE-2016-4924

vMX: Information leak vulnerability

An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product security testing. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 15.1 prior to 15.1F5; 14.1 prior to 14.1R8
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version 15.1 Update f1
Juniper ≫ Junos Version 15.1 Update f2
Juniper ≫ Junos Version 15.1 Update f2-s1
Juniper ≫ Junos Version 15.1 Update f2-s2
Juniper ≫ Junos Version 15.1 Update f2-s3
Juniper ≫ Junos Version 15.1 Update f2-s4
Juniper ≫ Junos Version 15.1 Update f3
Juniper ≫ Junos Version 15.1 Update f4
Juniper ≫ Junos Version 14.1
Juniper ≫ Junos Version 14.1 Update r1
Juniper ≫ Junos Version 14.1 Update r2
Juniper ≫ Junos Version 14.1 Update r3
Juniper ≫ Junos Version 14.1 Update r4
Juniper ≫ Junos Version 14.1 Update r5
Juniper ≫ Junos Version 14.1 Update r6
Juniper ≫ Junos Version 14.1 Update r7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.225
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 1.7 3.1 2.9
AV:L/AC:L/Au:S/C:P/I:N/A:N
Juniper 8.4 2 5.8
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/93531
Third Party Advisory
VDB Entry
https://kb.juniper.net/JSA10766
Vendor Advisory