CVE-2018-0010

Published: Jan 10, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1.

Affected (16)

Products: Juniper: Junos Space

Juniper

1 product

Junos Space

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos Space	Version 13.3 r1
Juniper Junos Space	Version 13.3 r2
Juniper Junos Space	Version 14.1 r1
Juniper Junos Space	Version 14.1 r2
Juniper Junos Space	Version 14.1 r3
Juniper Junos Space	Version 15.1 r1
Juniper Junos Space	Version 15.1 r2
Juniper Junos Space	Version 15.1 r3
Juniper Junos Space	Version 15.1 r4
Juniper Junos Space	Version 15.2 r1
Juniper Junos Space	Version 15.2 r2
Juniper Junos Space	Version 16.1 r1
Juniper Junos Space	Version 16.1 r2
Juniper Junos Space	Version 16.1 r3
Juniper Junos Space	Version 17.1 r1
Juniper Junos Space	Version 17.2 r1

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://kb.juniper.net/JSA10840

Source: sirt@juniper.net

PatchVendor Advisory

https://kb.juniper.net/JSA10840

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.