5.5

CVE-2023-44187

Junos OS Evolved: 'file copy' CLI command can disclose password to shell users

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system.

This issue affects Juniper Networks Junos OS Evolved:
  *  All versions prior to 20.4R3-S7-EVO;
  *  21.1 versions 21.1R1-EVO and later;
  *  21.2 versions prior to 21.2R3-S5-EVO;
  *  21.3 versions prior to 21.3R3-S4-EVO;
  *  21.4 versions prior to 21.4R3-S4-EVO;
  *  22.1 versions prior to 22.1R3-S2-EVO;
  *  22.2 versions prior to 22.2R2-EVO.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Os Evolved Version < 20.4
Juniper ≫ Junos Os Evolved Version 20.4 Update -
Juniper ≫ Junos Os Evolved Version 20.4 Update r1
Juniper ≫ Junos Os Evolved Version 20.4 Update r1-s1
Juniper ≫ Junos Os Evolved Version 20.4 Update r1-s2
Juniper ≫ Junos Os Evolved Version 20.4 Update r2
Juniper ≫ Junos Os Evolved Version 20.4 Update r2-s1
Juniper ≫ Junos Os Evolved Version 20.4 Update r2-s2
Juniper ≫ Junos Os Evolved Version 20.4 Update r2-s3
Juniper ≫ Junos Os Evolved Version 20.4 Update r3
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s1
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s2
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s3
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s4
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s5
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s6
Juniper ≫ Junos Os Evolved Version 21.1 Update -
Juniper ≫ Junos Os Evolved Version 21.1 Update r1
Juniper ≫ Junos Os Evolved Version 21.1 Update r1-s1
Juniper ≫ Junos Os Evolved Version 21.1 Update r2
Juniper ≫ Junos Os Evolved Version 21.1 Update r3
Juniper ≫ Junos Os Evolved Version 21.1 Update r3-s1
Juniper ≫ Junos Os Evolved Version 21.1 Update r3-s2
Juniper ≫ Junos Os Evolved Version 21.1 Update r3-s3
Juniper ≫ Junos Os Evolved Version 21.2 Update -
Juniper ≫ Junos Os Evolved Version 21.2 Update r1
Juniper ≫ Junos Os Evolved Version 21.2 Update r1-s1
Juniper ≫ Junos Os Evolved Version 21.2 Update r1-s2
Juniper ≫ Junos Os Evolved Version 21.2 Update r2
Juniper ≫ Junos Os Evolved Version 21.2 Update r2-s1
Juniper ≫ Junos Os Evolved Version 21.2 Update r2-s2
Juniper ≫ Junos Os Evolved Version 21.2 Update r3
Juniper ≫ Junos Os Evolved Version 21.2 Update r3-s1
Juniper ≫ Junos Os Evolved Version 21.2 Update r3-s2
Juniper ≫ Junos Os Evolved Version 21.2 Update r3-s3
Juniper ≫ Junos Os Evolved Version 21.2 Update r3-s4
Juniper ≫ Junos Os Evolved Version 21.3 Update -
Juniper ≫ Junos Os Evolved Version 21.3 Update r1
Juniper ≫ Junos Os Evolved Version 21.3 Update r1-s1
Juniper ≫ Junos Os Evolved Version 21.3 Update r2
Juniper ≫ Junos Os Evolved Version 21.3 Update r2-s1
Juniper ≫ Junos Os Evolved Version 21.3 Update r2-s2
Juniper ≫ Junos Os Evolved Version 21.3 Update r3
Juniper ≫ Junos Os Evolved Version 21.3 Update r3-s1
Juniper ≫ Junos Os Evolved Version 21.3 Update r3-s2
Juniper ≫ Junos Os Evolved Version 21.3 Update r3-s3
Juniper ≫ Junos Os Evolved Version 21.4 Update -
Juniper ≫ Junos Os Evolved Version 21.4 Update r1
Juniper ≫ Junos Os Evolved Version 21.4 Update r1-s1
Juniper ≫ Junos Os Evolved Version 21.4 Update r1-s2
Juniper ≫ Junos Os Evolved Version 21.4 Update r2
Juniper ≫ Junos Os Evolved Version 21.4 Update r2-s1
Juniper ≫ Junos Os Evolved Version 21.4 Update r2-s2
Juniper ≫ Junos Os Evolved Version 21.4 Update r3
Juniper ≫ Junos Os Evolved Version 21.4 Update r3-s1
Juniper ≫ Junos Os Evolved Version 21.4 Update r3-s2
Juniper ≫ Junos Os Evolved Version 21.4 Update r3-s3
Juniper ≫ Junos Os Evolved Version 22.1 Update r1
Juniper ≫ Junos Os Evolved Version 22.1 Update r1-s1
Juniper ≫ Junos Os Evolved Version 22.1 Update r1-s2
Juniper ≫ Junos Os Evolved Version 22.1 Update r2
Juniper ≫ Junos Os Evolved Version 22.1 Update r2-s1
Juniper ≫ Junos Os Evolved Version 22.1 Update r3
Juniper ≫ Junos Os Evolved Version 22.1 Update r3-s1
Juniper ≫ Junos Os Evolved Version 22.2 Update r1
Juniper ≫ Junos Os Evolved Version 22.2 Update r1-s1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Juniper 5.9 1.5 4
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://supportportal.juniper.net/JSA73151
Vendor Advisory