CVE-2013-4689

Published: Oct 17, 2013Modified: Apr 29, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts.

Affected (44)

Products: Juniper: Junos

Juniper

1 product

Junos

Configuration A

44 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Up to 10.4
Juniper Junos	Version 11.4
Juniper Junos	Version 12.1
Juniper Junos	Version 12.1x44
Juniper Junos	Version 12.1x45
Juniper Junos	Version 12.2
Juniper Junos	Version 12.3
Juniper Junos	Version 13.1
Juniper Junos	Version 4.0
Juniper Junos	Version 4.1
Juniper Junos	Version 4.2
Juniper Junos	Version 4.3
Juniper Junos	Version 4.4
Juniper Junos	Version 5.0
Juniper Junos	Version 5.1
Juniper Junos	Version 5.2
Juniper Junos	Version 5.3
Juniper Junos	Version 5.4
Juniper Junos	Version 5.5
Juniper Junos	Version 5.6
Juniper Junos	Version 5.7
Juniper Junos	Version 6.0
Juniper Junos	Version 6.1
Juniper Junos	Version 6.2
Juniper Junos	Version 6.3
Juniper Junos	Version 6.4
Juniper Junos	Version 7.0
Juniper Junos	Version 7.1
Juniper Junos	Version 7.2
Juniper Junos	Version 7.3
Juniper Junos	Version 7.4
Juniper Junos	Version 7.5
Juniper Junos	Version 7.6
Juniper Junos	Version 8.0
Juniper Junos	Version 8.1
Juniper Junos	Version 8.2
Juniper Junos	Version 8.3
Juniper Junos	Version 8.4
Juniper Junos	Version 9.0
Juniper Junos	Version 9.1
Juniper Junos	Version 9.2
Juniper Junos	Version 9.4
Juniper Junos	Version 9.5
Juniper Junos	Version 9.6