CVE-2020-1620

MEDIUM

Junos OS Evolved < 19.3R1 - Authenticated Password Hash Exposure via Configd Streamer Log

Title source: llm

Description

A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://kb.juniper.net/JSA11003

Scores

CVSS v3 5.5

EPSS 0.0030

EPSS Percentile 21.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-532 CWE-664

Status published

Products (1)

juniper/junos_os_evolved < 19.3r1

Published Apr 08, 2020

Tracked Since Feb 18, 2026