Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-0017

The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.

Published

2019-01-15T21:29:01.493

Last Modified

2024-11-21T04:16:03.543

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-434
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application juniper junos_space 13.3 Yes
Application juniper junos_space 13.3 Yes
Application juniper junos_space 13.3 Yes
Application juniper junos_space 13.3 Yes
Application juniper junos_space 14.1 Yes
Application juniper junos_space 14.1 Yes
Application juniper junos_space 14.1 Yes
Application juniper junos_space 14.1 Yes
Application juniper junos_space 15.1 Yes
Application juniper junos_space 15.1 Yes
Application juniper junos_space 15.1 Yes
Application juniper junos_space 15.1 Yes
Application juniper junos_space 15.2 Yes
Application juniper junos_space 15.2 Yes
Application juniper junos_space 15.2 Yes
Application juniper junos_space 16.1 Yes
Application juniper junos_space 16.1 Yes
Application juniper junos_space 16.1 Yes
Application juniper junos_space 16.1 Yes
Application juniper junos_space 17.1 Yes
Application juniper junos_space 17.2 Yes
Application juniper junos_space 18.1 Yes
Application juniper junos_space 18.2 Yes
References