CVE-2016-4926

EPSS 3.64%
Published 20.03.2017 20:59:00
Last modified 20.04.2025 01:37:25
Source sirt@juniper.net
Teams watchlist Login
Open Login

Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Juniper ≫ Junos Space Updater1 Version <= 15.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.64%	0.867

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securityfocus.com/bid/93540

Third Party Advisory

VDB Entry

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-4926

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-4926

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-4926

EUVD