CVE-2019-0029

HIGH

Juniper Advanced Threat Prevention 5.0.0-5.0.2 - Authenticated Credential Exposure via Splunk Log File

Title source: llm
STIX 2.1

Description

Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://kb.juniper.net/JSA10918

Scores

CVSS v3 8.8
EPSS 0.0034
EPSS Percentile 25.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-532
Status published
Products (1)
juniper/advanced_threat_prevention 5.0.0 - 5.0.3
Published Jan 15, 2019
Tracked Since Feb 18, 2026