Description
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device.
References (2)
Core 2
Core References
Mitigation, Vendor Advisory x_refsource_confirm
https://kb.juniper.net/JSA10770
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/98772
Scores
CVSS v3
8.8
EPSS
0.0057
EPSS Percentile
69.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-863
Status
published
Products (2)
juniper/junos_space
< 16.1
Juniper Networks/Junos Space
versions prior to 16.1R1
Published
May 30, 2017
Tracked Since
Feb 18, 2026