8.8

CVE-2019-0017

Junos Space: Unrestricted file upload vulnerability

The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Space Version 13.3 Update r1
Juniper ≫ Junos Space Version 13.3 Update r2
Juniper ≫ Junos Space Version 13.3 Update r3
Juniper ≫ Junos Space Version 13.3 Update r4
Juniper ≫ Junos Space Version 14.1 Update -
Juniper ≫ Junos Space Version 14.1 Update r1
Juniper ≫ Junos Space Version 14.1 Update r2
Juniper ≫ Junos Space Version 14.1 Update r3
Juniper ≫ Junos Space Version 15.1 Update r1
Juniper ≫ Junos Space Version 15.1 Update r2
Juniper ≫ Junos Space Version 15.1 Update r3
Juniper ≫ Junos Space Version 15.1 Update r4
Juniper ≫ Junos Space Version 15.2 Update -
Juniper ≫ Junos Space Version 15.2 Update r1
Juniper ≫ Junos Space Version 15.2 Update r2
Juniper ≫ Junos Space Version 16.1 Update -
Juniper ≫ Junos Space Version 16.1 Update r1
Juniper ≫ Junos Space Version 16.1 Update r2
Juniper ≫ Junos Space Version 16.1 Update r3
Juniper ≫ Junos Space Version 17.1 Update r1
Juniper ≫ Junos Space Version 17.2 Update r1.4
Juniper ≫ Junos Space Version 18.1 Update r1
Juniper ≫ Junos Space Version 18.2 Update r1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.1% 0.614
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
Juniper 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

https://kb.juniper.net/JSA10917
Vendor Advisory