6.5

CVE-2018-0010

A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Space Version 13.3 Update r1
Juniper ≫ Junos Space Version 13.3 Update r2
Juniper ≫ Junos Space Version 14.1 Update r1
Juniper ≫ Junos Space Version 14.1 Update r2
Juniper ≫ Junos Space Version 14.1 Update r3
Juniper ≫ Junos Space Version 15.1 Update r1
Juniper ≫ Junos Space Version 15.1 Update r2
Juniper ≫ Junos Space Version 15.1 Update r3
Juniper ≫ Junos Space Version 15.1 Update r4
Juniper ≫ Junos Space Version 15.2 Update r1
Juniper ≫ Junos Space Version 15.2 Update r2
Juniper ≫ Junos Space Version 16.1 Update r1
Juniper ≫ Junos Space Version 16.1 Update r2
Juniper ≫ Junos Space Version 16.1 Update r3
Juniper ≫ Junos Space Version 17.1 Update r1
Juniper ≫ Junos Space Version 17.2 Update r1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.61% 0.446
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://kb.juniper.net/JSA10840
Patch
Vendor Advisory