Skip to main content

Advanced Threat Prevention CVE-2019-0004

MEDIUM
Insertion of Sensitive Information into Log File (CWE-532)
2019-01-15 sirt@juniper.net
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Jan 15, 2019 - 21:29 nvd
MEDIUM 5.5

DescriptionNVD

On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI interface. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

AnalysisAI

On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-532. On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI interface.0 versions prior to 5.0.3. Affected products include: Juniper Advanced Threat Prevention. Version information: prior to 5.0.3..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2019-0022 CRITICAL
9.8 Jan 15

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take f

CVE-2019-0020 CRITICAL
9.8 Jan 15

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take

CVE-2019-0029 HIGH
7.8 Jan 15

Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Rated high severity (C

CVE-2019-0021 MEDIUM
5.5 Jan 15

On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing a

CVE-2019-0027 MEDIUM
5.4 Jan 15

A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenti

CVE-2019-0026 MEDIUM
5.4 Jan 15

A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated u

CVE-2019-0025 MEDIUM
5.4 Jan 15

A persistent cross-site scripting (XSS) vulnerability in RADIUS configuration menu of Juniper ATP may allow authenticate

CVE-2019-0024 MEDIUM
5.4 Jan 15

A persistent cross-site scripting (XSS) vulnerability in the Email Collectors menu of Juniper ATP may allow authenticate

CVE-2019-0023 MEDIUM
5.4 Jan 15

A persistent cross-site scripting (XSS) vulnerability in the Golden VM menu of Juniper ATP may allow authenticated user

CVE-2019-0018 MEDIUM
5.4 Jan 15

A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated

Share

CVE-2019-0004 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy