← Back

CVE-2015-7751

nvd nist
Published: Oct 19, 2015Modified: May 6, 2026

JSON object

Loading...
6.9
Vector
AV:L/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 3.4 / Impact: 10.0
Source: NVD

Description

Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D35, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D105, 14.1X51 before 14.1X51-D70, 14.1X53 before 14.1X53-D25, 14.1X55 before 14.1X55-D20, 14.2 before 14.2R1, 15.1 before 15.1F2 or 15.1R1, and 15.1X49 before 15.1X49-D10 does not require a password for the root user when pam.conf is "corrupted," which allows local users to gain root privileges by modifying the file.

Affected (54)

Products: Juniper: Junos
1 product
Junos
Configuration A
54 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Up to 12.1x44
Version 12.1x46
Version 12.1x46 d10
Version 12.1x46 d15
Version 12.1x46 d20
Version 12.1x46 d25
Version 12.1x46 d30
Version 12.1x47
Version 12.1x47 d10
Version 12.1x47 d15
Version 12.1x47 d20
Version 12.3
Version 12.3 r1
Version 12.3 r2
Version 12.3 r3
Version 12.3 r4
Version 12.3 r5
Version 12.3 r6
Version 12.3 r7
Version 12.3 r8
Version 12.3x48
Version 12.3x48 d10
Version 12.3x48 d5
Version 13.2
Version 13.2 r1
Version 13.2 r2
Version 13.2 r3
Version 13.2 r4
Version 13.2 r5
Version 13.2 r6
Version 13.2x51
Version 13.2x51 d10
Version 13.2x51 d15
Version 13.2x51 d20
Version 13.2x51 d25
Version 13.3
Version 13.3 r1
Version 13.3 r2
Version 13.3 r3
Version 13.3 r4
Version 13.3 r5
Version 14.1
Version 14.1 r1
Version 14.1 r2
Version 14.1 r3
Version 14.1 r4
Version 14.1x50
Version 14.1x51
Version 14.1x53
Version 14.1x55
Version 14.2
Version 15.1
Version 15.1 r1
Version 15.1x49

Related CWEs

References (4)

Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.