CVE-2019-0062

EPSS 1.09%
Veröffentlicht 09.10.2019 20:15:17
Zuletzt bearbeitet 21.11.2024 04:16:10
Erkennungen
Login

Junos OS: Session fixation vulnerability in J-Web

A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administrators web session and potentially gain administrative access to the device. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S15 on EX Series; 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 14.1X53 versions prior to 14.1X53-D51; 15.1 versions prior to 15.1F6-S13, 15.1R7-S5; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238; 16.1 versions prior to 16.1R4-S13, 16.1R7-S5; 16.2 versions prior to 16.2R2-S10; 17.1 versions prior to 17.1R3-S1; 17.2 versions prior to 17.2R2-S8, 17.2R3-S3; 17.3 versions prior to 17.3R3-S5; 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S2, 19.1R2.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 4

NVD 194 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 12.3 Update -

   Juniper ≫ Ex2200 Version -
   Juniper ≫ Ex2200-c Version -
   Juniper ≫ Ex2300 Version -
   Juniper ≫ Ex2300-c Version -
   Juniper ≫ Ex3200 Version -
   Juniper ≫ Ex3300 Version -
   Juniper ≫ Ex3400 Version -
   Juniper ≫ Ex4200 Version -
   Juniper ≫ Ex4300 Version -
   Juniper ≫ Ex4500 Version -
   Juniper ≫ Ex4550 Version -
   Juniper ≫ Ex4600 Version -
   Juniper ≫ Ex4650 Version -
   Juniper ≫ Ex6210 Version -
   Juniper ≫ Ex8208 Version -
   Juniper ≫ Ex8216 Version -
   Juniper ≫ Ex9204 Version -
   Juniper ≫ Ex9208 Version -
   Juniper ≫ Ex9214 Version -
   Juniper ≫ Ex9251 Version -
   Juniper ≫ Ex9253 Version -

Juniper ≫ Junos Version 12.3 Update r1

Juniper ≫ Junos Version 12.3 Update r11

Juniper ≫ Junos Version 12.3 Update r12

Juniper ≫ Junos Version 12.3 Update r12-s13

Juniper ≫ Junos Version 12.3 Update r12-s14

Juniper ≫ Junos Version 12.3 Update r2

Juniper ≫ Junos Version 12.3 Update r3

Juniper ≫ Junos Version 12.3 Update r4

Juniper ≫ Junos Version 12.3 Update r5

Juniper ≫ Junos Version 12.3 Update r6

Juniper ≫ Junos Version 12.3 Update r7

Juniper ≫ Junos Version 12.3 Update r8

Juniper ≫ Junos Version 12.3 Update r9

Juniper ≫ Junos Version 12.3x48 Update -

   Juniper ≫ Csrx Version -
   Juniper ≫ Srx100 Version -
   Juniper ≫ Srx110 Version -
   Juniper ≫ Srx1400 Version -
   Juniper ≫ Srx1500 Version -
   Juniper ≫ Srx210 Version -
   Juniper ≫ Srx220 Version -
   Juniper ≫ Srx240 Version -
   Juniper ≫ Srx300 Version -
   Juniper ≫ Srx320 Version -
   Juniper ≫ Srx340 Version -
   Juniper ≫ Srx3400 Version -
   Juniper ≫ Srx345 Version -
   Juniper ≫ Srx3600 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx4600 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx550 Version -
   Juniper ≫ Srx550 Hm Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -
   Juniper ≫ Srx650 Version -
   Juniper ≫ Vsrx Version -

Juniper ≫ Junos Version 12.3x48 Update d10

Juniper ≫ Junos Version 12.3x48 Update d15

Juniper ≫ Junos Version 12.3x48 Update d20

Juniper ≫ Junos Version 12.3x48 Update d25

Juniper ≫ Junos Version 12.3x48 Update d30

Juniper ≫ Junos Version 12.3x48 Update d35

Juniper ≫ Junos Version 12.3x48 Update d40

Juniper ≫ Junos Version 12.3x48 Update d45

Juniper ≫ Junos Version 12.3x48 Update d50

Juniper ≫ Junos Version 12.3x48 Update d55

Juniper ≫ Junos Version 12.3x48 Update d60

Juniper ≫ Junos Version 12.3x48 Update d65

Juniper ≫ Junos Version 12.3x48 Update d70

Juniper ≫ Junos Version 12.3x48 Update d75

Juniper ≫ Junos Version 12.3x48 Update d80

Juniper ≫ Junos Version 14.1x53 Update -

Juniper ≫ Junos Version 14.1x53 Update d10

Juniper ≫ Junos Version 14.1x53 Update d15

Juniper ≫ Junos Version 14.1x53 Update d16

Juniper ≫ Junos Version 14.1x53 Update d25

Juniper ≫ Junos Version 14.1x53 Update d26

Juniper ≫ Junos Version 14.1x53 Update d27

Juniper ≫ Junos Version 14.1x53 Update d30

Juniper ≫ Junos Version 14.1x53 Update d35

Juniper ≫ Junos Version 14.1x53 Update d40

Juniper ≫ Junos Version 14.1x53 Update d45

Juniper ≫ Junos Version 14.1x53 Update d48

Juniper ≫ Junos Version 14.1x53 Update d49

Juniper ≫ Junos Version 15.1 Update -

Juniper ≫ Junos Version 15.1 Update f1

Juniper ≫ Junos Version 15.1 Update f2

Juniper ≫ Junos Version 15.1 Update f2-s1

Juniper ≫ Junos Version 15.1 Update f2-s2

Juniper ≫ Junos Version 15.1 Update f2-s3

Juniper ≫ Junos Version 15.1 Update f2-s4

Juniper ≫ Junos Version 15.1 Update f3

Juniper ≫ Junos Version 15.1 Update f4

Juniper ≫ Junos Version 15.1 Update f5

Juniper ≫ Junos Version 15.1 Update f6

Juniper ≫ Junos Version 15.1 Update f6-s3

Juniper ≫ Junos Version 15.1 Update r1

Juniper ≫ Junos Version 15.1 Update r2

Juniper ≫ Junos Version 15.1 Update r3

Juniper ≫ Junos Version 15.1 Update r4

Juniper ≫ Junos Version 15.1 Update r4-s9

Juniper ≫ Junos Version 15.1 Update r5

Juniper ≫ Junos Version 15.1 Update r6

Juniper ≫ Junos Version 15.1 Update r6-s6

Juniper ≫ Junos Version 15.1 Update r7-s1

Juniper ≫ Junos Version 15.1 Update r7-s2

Juniper ≫ Junos Version 15.1 Update r7-s3

Juniper ≫ Junos Version 15.1x49 Update -

Juniper ≫ Junos Version 15.1x49 Update d10

Juniper ≫ Junos Version 15.1x49 Update d100

Juniper ≫ Junos Version 15.1x49 Update d110

Juniper ≫ Junos Version 15.1x49 Update d120

Juniper ≫ Junos Version 15.1x49 Update d130

Juniper ≫ Junos Version 15.1x49 Update d140

Juniper ≫ Junos Version 15.1x49 Update d150

Juniper ≫ Junos Version 15.1x49 Update d160

Juniper ≫ Junos Version 15.1x49 Update d170

Juniper ≫ Junos Version 15.1x49 Update d20

Juniper ≫ Junos Version 15.1x49 Update d30

Juniper ≫ Junos Version 15.1x49 Update d35

Juniper ≫ Junos Version 15.1x49 Update d40

Juniper ≫ Junos Version 15.1x49 Update d45

Juniper ≫ Junos Version 15.1x49 Update d50

Juniper ≫ Junos Version 15.1x49 Update d55

Juniper ≫ Junos Version 15.1x49 Update d60

Juniper ≫ Junos Version 15.1x49 Update d65

Juniper ≫ Junos Version 15.1x49 Update d70

Juniper ≫ Junos Version 15.1x49 Update d75

Juniper ≫ Junos Version 15.1x49 Update d80

Juniper ≫ Junos Version 15.1x53 Update -

Juniper ≫ Junos Version 15.1x53 Update d20

Juniper ≫ Junos Version 15.1x53 Update d21

Juniper ≫ Junos Version 15.1x53 Update d210

Juniper ≫ Junos Version 15.1x53 Update d25

Juniper ≫ Junos Version 15.1x53 Update d30

Juniper ≫ Junos Version 15.1x53 Update d31

Juniper ≫ Junos Version 15.1x53 Update d32

Juniper ≫ Junos Version 15.1x53 Update d33

Juniper ≫ Junos Version 15.1x53 Update d34

Juniper ≫ Junos Version 15.1x53 Update d40

Juniper ≫ Junos Version 15.1x53 Update d45

Juniper ≫ Junos Version 15.1x53 Update d56

Juniper ≫ Junos Version 15.1x53 Update d60

Juniper ≫ Junos Version 15.1x53 Update d61

Juniper ≫ Junos Version 15.1x53 Update d62

Juniper ≫ Junos Version 15.1x53 Update d63

Juniper ≫ Junos Version 15.1x53 Update d65

Juniper ≫ Junos Version 15.1x53 Update d70

Juniper ≫ Junos Version 16.1 Update -

Juniper ≫ Junos Version 16.1 Update r1

Juniper ≫ Junos Version 16.1 Update r2

Juniper ≫ Junos Version 16.1 Update r3

Juniper ≫ Junos Version 16.1 Update r3-s10

Juniper ≫ Junos Version 16.1 Update r4

Juniper ≫ Junos Version 16.1 Update r5-s4

Juniper ≫ Junos Version 16.1 Update r6-s1

Juniper ≫ Junos Version 16.1 Update r7

Juniper ≫ Junos Version 16.1 Update r7-s4

Juniper ≫ Junos Version 16.2 Update -

Juniper ≫ Junos Version 16.2 Update r1

Juniper ≫ Junos Version 16.2 Update r2

Juniper ≫ Junos Version 16.2 Update r2-s1

Juniper ≫ Junos Version 16.2 Update r2-s2

Juniper ≫ Junos Version 16.2 Update r2-s5

Juniper ≫ Junos Version 16.2 Update r2-s6

Juniper ≫ Junos Version 16.2 Update r2-s7

Juniper ≫ Junos Version 16.2 Update r2-s8

Juniper ≫ Junos Version 16.2 Update r2-s9

Juniper ≫ Junos Version 17.1 Update -

Juniper ≫ Junos Version 17.1 Update r1

Juniper ≫ Junos Version 17.1 Update r2

Juniper ≫ Junos Version 17.1 Update r2-s1

Juniper ≫ Junos Version 17.1 Update r2-s10

Juniper ≫ Junos Version 17.1 Update r2-s2

Juniper ≫ Junos Version 17.1 Update r2-s3

Juniper ≫ Junos Version 17.1 Update r2-s4

Juniper ≫ Junos Version 17.1 Update r2-s5

Juniper ≫ Junos Version 17.1 Update r2-s6

Juniper ≫ Junos Version 17.1 Update r2-s7

Juniper ≫ Junos Version 17.1 Update r3

Juniper ≫ Junos Version 17.2 Update -

Juniper ≫ Junos Version 17.2 Update r1

Juniper ≫ Junos Version 17.2 Update r1-s2

Juniper ≫ Junos Version 17.2 Update r1-s4

Juniper ≫ Junos Version 17.2 Update r1-s7

Juniper ≫ Junos Version 17.2 Update r1-s8

Juniper ≫ Junos Version 17.2 Update r2-s6

Juniper ≫ Junos Version 17.2 Update r2-s7

Juniper ≫ Junos Version 17.2 Update r3-s1

Juniper ≫ Junos Version 17.2 Update r3-s2

Juniper ≫ Junos Version 17.3 Update -

Juniper ≫ Junos Version 17.3 Update r2

Juniper ≫ Junos Version 17.3 Update r2-s1

Juniper ≫ Junos Version 17.3 Update r2-s2

Juniper ≫ Junos Version 17.3 Update r3-s1

Juniper ≫ Junos Version 17.3 Update r3-s2

Juniper ≫ Junos Version 17.3 Update r3-s3

Juniper ≫ Junos Version 17.3 Update r3-s4

Juniper ≫ Junos Version 17.4 Update -

Juniper ≫ Junos Version 17.4 Update r1

Juniper ≫ Junos Version 17.4 Update r1-s1

Juniper ≫ Junos Version 17.4 Update r1-s2

Juniper ≫ Junos Version 17.4 Update r1-s4

Juniper ≫ Junos Version 17.4 Update r1-s6

Juniper ≫ Junos Version 17.4 Update r1-s7

Juniper ≫ Junos Version 17.4 Update r2

Juniper ≫ Junos Version 17.4 Update r2-s1

Juniper ≫ Junos Version 17.4 Update r2-s3

Juniper ≫ Junos Version 17.4 Update r2-s4

Juniper ≫ Junos Version 18.1 Update -

Juniper ≫ Junos Version 18.1 Update r2

Juniper ≫ Junos Version 18.1 Update r2-s1

Juniper ≫ Junos Version 18.1 Update r2-s2

Juniper ≫ Junos Version 18.1 Update r2-s4

Juniper ≫ Junos Version 18.1 Update r3

Juniper ≫ Junos Version 18.1 Update r3-s2

Juniper ≫ Junos Version 18.1 Update r3-s3

Juniper ≫ Junos Version 18.1 Update r3-s4

Juniper ≫ Junos Version 18.2 Update -

Juniper ≫ Junos Version 18.2 Update r1-s5

Juniper ≫ Junos Version 18.2 Update r2-s1

Juniper ≫ Junos Version 18.2 Update r2-s2

Juniper ≫ Junos Version 18.2 Update r2-s3

Juniper ≫ Junos Version 18.2 Update r2-s4

Juniper ≫ Junos Version 18.3 Update -

Juniper ≫ Junos Version 18.3 Update r1

Juniper ≫ Junos Version 18.3 Update r1-s1

Juniper ≫ Junos Version 18.3 Update r1-s2

Juniper ≫ Junos Version 18.3 Update r1-s3

Juniper ≫ Junos Version 18.3 Update r2

Juniper ≫ Junos Version 18.4 Update -

Juniper ≫ Junos Version 18.4 Update r1

Juniper ≫ Junos Version 18.4 Update r1-s2

Juniper ≫ Junos Version 19.1 Update -

Juniper ≫ Junos Version 19.1 Update r1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.09%	0.609

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
Juniper	7.5	1.6	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-384 Session Fixation

Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

https://kb.juniper.net/JSA10961

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-0062

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-0062

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-0062

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-0062