CVE-2020-1624

MEDIUM

Junos OS Evolved < 19.1r1 - Authenticated Sensitive Information Exposure via Raw objmon Configuration Files

Title source: llm

Description

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://kb.juniper.net/JSA11003

Scores

CVSS v3 5.5

EPSS 0.0030

EPSS Percentile 21.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-532

Status published

Products (1)

juniper/junos_os_evolved < 19.1r1

Published Apr 08, 2020

Tracked Since Feb 18, 2026