Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-0016

A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.

Published

2019-01-15T21:29:01.463

Last Modified

2024-11-21T04:16:03.423

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

4.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application juniper junos_space 13.3 Yes
Application juniper junos_space 13.3 Yes
Application juniper junos_space 13.3 Yes
Application juniper junos_space 13.3 Yes
Application juniper junos_space 14.1 Yes
Application juniper junos_space 14.1 Yes
Application juniper junos_space 14.1 Yes
Application juniper junos_space 14.1 Yes
Application juniper junos_space 15.1 Yes
Application juniper junos_space 15.1 Yes
Application juniper junos_space 15.1 Yes
Application juniper junos_space 15.1 Yes
Application juniper junos_space 15.2 Yes
Application juniper junos_space 15.2 Yes
Application juniper junos_space 15.2 Yes
Application juniper junos_space 16.1 Yes
Application juniper junos_space 16.1 Yes
Application juniper junos_space 16.1 Yes
Application juniper junos_space 16.1 Yes
Application juniper junos_space 17.1 Yes
Application juniper junos_space 17.2 Yes
Application juniper junos_space 18.1 Yes
Application juniper junos_space 18.2 Yes
References