6.5

CVE-2019-0016

Junos Space: Authenticated user able to delete devices without delete device privileges

A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Space Version 13.3 Update r1
Juniper ≫ Junos Space Version 13.3 Update r2
Juniper ≫ Junos Space Version 13.3 Update r3
Juniper ≫ Junos Space Version 13.3 Update r4
Juniper ≫ Junos Space Version 14.1 Update -
Juniper ≫ Junos Space Version 14.1 Update r1
Juniper ≫ Junos Space Version 14.1 Update r2
Juniper ≫ Junos Space Version 14.1 Update r3
Juniper ≫ Junos Space Version 15.1 Update r1
Juniper ≫ Junos Space Version 15.1 Update r2
Juniper ≫ Junos Space Version 15.1 Update r3
Juniper ≫ Junos Space Version 15.1 Update r4
Juniper ≫ Junos Space Version 15.2 Update -
Juniper ≫ Junos Space Version 15.2 Update r1
Juniper ≫ Junos Space Version 15.2 Update r2
Juniper ≫ Junos Space Version 16.1 Update -
Juniper ≫ Junos Space Version 16.1 Update r1
Juniper ≫ Junos Space Version 16.1 Update r2
Juniper ≫ Junos Space Version 16.1 Update r3
Juniper ≫ Junos Space Version 17.1 Update r1
Juniper ≫ Junos Space Version 17.2 Update r1.4
Juniper ≫ Junos Space Version 18.1 Update r1
Juniper ≫ Junos Space Version 18.2 Update r1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.93% 0.558
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
NIST 5.5 8 4.9
AV:N/AC:L/Au:S/C:N/I:P/A:P
Juniper 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://kb.juniper.net/JSA10917
Vendor Advisory