CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:1.0:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:1.1:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:1.2:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:1.3:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:1.4:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:2.0:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:11.1:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:11.2:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:11.3:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:11.4:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:12.1:*:*:*:*:*:*:*
cpe:2.3:a:juniper:junos_space:12.2:*:*:*:*:*:*:*
OR cpe:2.3:a:juniper:junos_space_virtual_appliance:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:junos_space_ja1500_appliance:-:*:*:*:*:*:*:*

History

21 Nov 2024, 01:53

Type Values Removed Values Added
References () http://osvdb.org/93112 - () http://osvdb.org/93112 -
References () http://www.securityfocus.com/bid/59760 - () http://www.securityfocus.com/bid/59760 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/84109 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/84109 -
References () https://kb.juniper.net/KB27374 - Vendor Advisory () https://kb.juniper.net/KB27374 - Vendor Advisory

Information

Published : 2013-05-08 23:55

Updated : 2024-11-21 01:53


NVD link : CVE-2013-3497

Mitre link : CVE-2013-3497

CVE.ORG link : CVE-2013-3497


JSON object : View

Products Affected

juniper

  • junos_space
  • junos_space_ja1500_appliance
  • junos_space_virtual_appliance
CWE
CWE-255

Credentials Management Errors