7.2
CVE-2020-1666
- EPSS 0.04%
- Veröffentlicht 16.10.2020 21:15:12
- Zuletzt bearbeitet 21.11.2024 05:11:07
- Quelle sirt@juniper.net
- CVE-Watchlists
- Unerledigt
LoginThe system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console cable is disconnected. This could allow a malicious attacker with physical access to the console the ability to resume a previous interactive session and possibly gain administrative privileges. This issue affects all Juniper Networks Junos OS Evolved versions after 18.4R1-EVO, prior to 20.2R1-EVO.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Os Evolved Version19.2 Updater1
Juniper ≫ Junos Os Evolved Version19.2 Updater2
Juniper ≫ Junos Os Evolved Version19.3 Updater2
Juniper ≫ Junos Os Evolved Version19.4 Updater1
Juniper ≫ Junos Os Evolved Version19.4 Updater2
Juniper ≫ Junos Os Evolved Version19.4 Updater2-s1
Juniper ≫ Junos Os Evolved Version20.1 Updater1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.094 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
| sirt@juniper.net | 6.6 | 0.7 | 5.9 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-613 Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."