← Back

CVE-2021-0210

nvd nist
Published: Jan 15, 2021Modified: Nov 21, 2024

JSON object

Loading...
6.8
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Exploitability: 1.6 / Impact: 5.2
Source: sirt@juniper.net (Secondary)

Description

An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target system through opportunistic use of an authenticated users session. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S17; 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3, 19.2R3-S1; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2.

Affected (158)

Products: Juniper: Junos
1 product
Junos
Configuration A
158 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 12.3
Version 12.3 r10-s1
Version 12.3 r10-s2
Version 12.3 r10
Version 12.3 r11
Version 12.3 r12-s11
Version 12.3 r12-s12
Version 12.3 r12-s13
Version 12.3 r12-s14
Version 12.3 r12-s15
Version 12.3 r12-s16
Version 12.3 r12-s1
Version 12.3 r12-s3
Version 12.3 r12-s4
Version 12.3 r12-s6
Version 12.3 r12-s8
Version 12.3 r12
Version 12.3 r1
Version 17.3
Version 17.3 r1-s1
Version 17.3 r2-s1
Version 17.3 r2-s2
Version 17.3 r2-s3
Version 17.3 r2-s4
Version 17.3 r2-s5
Version 17.3 r2
Version 17.3 r3-s1
Version 17.3 r3-s2
Version 17.3 r3-s3
Version 17.3 r3-s4
Version 17.3 r3-s7
Version 17.3 r3-s8
Version 17.3 r3-s9
Version 17.3 r3
Version 17.4
Version 17.4 r1-s1
Version 17.4 r1-s2
Version 17.4 r1-s4
Version 17.4 r1-s5
Version 17.4 r1-s6
Version 17.4 r1-s7
Version 17.4 r1
Version 17.4 r2-s10
Version 17.4 r2-s11
Version 17.4 r2-s1
Version 17.4 r2-s2
Version 17.4 r2-s3
Version 17.4 r2-s4
Version 17.4 r2-s5
Version 17.4 r2-s6
Version 17.4 r2-s7
Version 17.4 r2-s8
Version 17.4 r2-s9
Version 17.4 r2
Version 17.4 r3-s1
Version 17.4 r3-s2
Version 17.4 r3
Version 18.1
Version 18.1 r1
Version 18.1 r2-s1
Version 18.1 r2-s2
Version 18.1 r2-s4
Version 18.1 r2
Version 18.1 r3-s10
Version 18.1 r3-s1
Version 18.1 r3-s2
Version 18.1 r3-s3
Version 18.1 r3-s4
Version 18.1 r3-s6
Version 18.1 r3-s7
Version 18.1 r3-s8
Version 18.1 r3-s9
Version 18.1 r3
Version 18.2
Version 18.2 r1-s3
Version 18.2 r1-s4
Version 18.2 r1-s5
Version 18.2 r1
Version 18.2 r1
Version 18.2 r2-s1
Version 18.2 r2-s2
Version 18.2 r2-s3
Version 18.2 r2-s4
Version 18.2 r2-s5
Version 18.2 r2-s6
Version 18.2 r2
Version 18.2 r3-s1
Version 18.2 r3-s2
Version 18.2 r3-s3
Version 18.2 r3-s4
Version 18.2 r3-s5
Version 18.2 r3
Version 18.3
Version 18.3 r1-s1
Version 18.3 r1-s2
Version 18.3 r1-s3
Version 18.3 r1-s5
Version 18.3 r1-s6
Version 18.3 r1
Version 18.3 r2-s1
Version 18.3 r2-s2
Version 18.3 r2-s3
Version 18.3 r2
Version 18.3 r3-s1
Version 18.3 r3-s2
Version 18.3 r3-s3
Version 18.3 r3
Version 18.4
Version 18.4 r1-s1
Version 18.4 r1-s2
Version 18.4 r1-s5
Version 18.4 r1-s6
Version 18.4 r1
Version 18.4 r2-s1
Version 18.4 r2-s2
Version 18.4 r2-s3
Version 18.4 r2-s4
Version 18.4 r2
Version 18.4 r3-s1
Version 18.4 r3-s2
Version 18.4 r3-s3
Version 18.4 r3-s4
Version 18.4 r3
Version 19.1
Version 19.1 r1-s1
Version 19.1 r1-s2
Version 19.1 r1-s3
Version 19.1 r1-s4
Version 19.1 r1-s5
Version 19.1 r1
Version 19.1 r2-s1
Version 19.1 r2
Version 19.1 r3-s1
Version 19.1 r3-s2
Version 19.1 r3
Version 19.2
Version 19.2 r1-s1
Version 19.2 r1-s2
Version 19.2 r1-s3
Version 19.2 r1-s4
Version 19.2 r1
Version 19.3
Version 19.3 r1-s1
Version 19.3 r1
Version 19.3 r2-s1
Version 19.3 r2-s2
Version 19.3 r2-s3
Version 19.3 r2
Version 19.4 r1-s1
Version 19.4 r1-s2
Version 19.4 r1
Version 19.4 r2-s1
Version 19.4 r2
Version 20.1 r1-s1
Version 20.1 r1-s2
Version 20.1 r1-s3
Version 20.1 r1
Version 20.2 r1

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.