Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-0046

A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space administrators or perform administrative actions. This issue affects Juniper Networks Junos Space versions prior to 18.2R1.

Published

2018-10-10T18:29:00.780

Last Modified

2024-11-21T03:37:25.467

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 8.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	juniper	junos_space	18.1r1	Yes

References

http://www.securityfocus.com/bid/105566 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1041862 Third Party Advisory, VDB Entry ([email protected])
https://github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0d Patch, Third Party Advisory ([email protected])
https://kb.juniper.net/JSA10880 Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/105566 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1041862 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0d Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://kb.juniper.net/JSA10880 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)