CVE-2014-0615

Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R5, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows local users to gain privileges via vectors related to "certain combinations of Junos OS CLI commands and arguments."

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10608	Vendor Advisory
http://osvdb.org/101862
http://www.securityfocus.com/bid/64762
http://www.securitytracker.com/id/1029585
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10608	Vendor Advisory
http://osvdb.org/101862
http://www.securityfocus.com/bid/64762
http://www.securitytracker.com/id/1029585

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:juniper:junos:10.4:::::::*
	cpe:2.3:o:juniper:junos:11.4:::::::*
	cpe:2.3:o:juniper:junos:12.1r:::::::*
	cpe:2.3:o:juniper:junos:12.1x44:::::::*
	cpe:2.3:o:juniper:junos:12.1x45:::::::*
	cpe:2.3:o:juniper:junos:12.1x46:::::::*
	cpe:2.3:o:juniper:junos:12.2:::::::*
	cpe:2.3:o:juniper:junos:12.3:::::::*
	cpe:2.3:o:juniper:junos:13.1:::::::*
	cpe:2.3:o:juniper:junos:13.2:::::::*
	cpe:2.3:o:juniper:junos:13.3:::::::*

History

21 Nov 2024, 02:02

Type	Values Removed	Values Added
References	~~() http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10608 - Vendor Advisory~~	() http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10608 - Vendor Advisory
References	~~() http://osvdb.org/101862 -~~	() http://osvdb.org/101862 -
References	~~() http://www.securityfocus.com/bid/64762 -~~	() http://www.securityfocus.com/bid/64762 -
References	~~() http://www.securitytracker.com/id/1029585 -~~	() http://www.securitytracker.com/id/1029585 -

Information

Published : 2014-01-15 16:08

Updated : 2024-11-21 02:02

NVD link : CVE-2014-0615

Mitre link : CVE-2014-0615

CVE.ORG link : CVE-2014-0615

JSON object : View

Products Affected

juniper

junos

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2014-0615", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-01-15T16:08:04.313", "references": [{"url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10608", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/101862", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/64762", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1029585", "source": "cve@mitre.org"}, {"url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10608", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/101862", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/64762", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1029585", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R5, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows local users to gain privileges via vectors related to \"certain combinations of Junos OS CLI commands and arguments.\""}, {"lang": "es", "value": "Juniper Junos 10.4 anteriores a 10.4R16, 11.4 anteriores a 11.4R10, 12.1R anteriores a 12.1R8-S2, 12.1X44 anteriores a 12.1X44-D30, 12.1X45 anteriores a 12.1X45-D20, 12.1X46 anteriores a 12.1X46-D10, 12.2 anteriores a 12.2R7, 12.3 anteriores a 12.3R5, 13.1 anteriores a 13.1R3-S1, 13.2 anteriores a 13.2R2 y 13.3 anteriores a 13.3R1, permite a usuarios locales obener privilegios a trav\u00e9s de vectores relacionados con \"ciertas combinaciones de comandos y argumentos Junos OS CLI\"."}], "lastModified": "2024-11-21T02:02:30.123", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:10.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45C2DA1E-12A7-4018-92CE-7621FC278025"}, {"criteria": "cpe:2.3:o:juniper:junos:11.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41543223-0FA9-4CBE-8DEC-717CE5FFED79"}, {"criteria": "cpe:2.3:o:juniper:junos:12.1r:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECE31A7E-657C-49FC-B3F8-5654B0C6087E"}, {"criteria": "cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B307477-C5F2-4D98-AF4C-640D326164C7"}, {"criteria": "cpe:2.3:o:juniper:junos:12.1x45:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E747970-4C27-4B46-9163-964252CB98F6"}, {"criteria": "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFB89F64-16BB-4A14-9084-B338668D7FF1"}, {"criteria": "cpe:2.3:o:juniper:junos:12.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5FB9541A-2570-459A-87D6-5341C67B8EC8"}, {"criteria": "cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E014A0D-0054-4EBA-BA1F-035B74BD822F"}, {"criteria": "cpe:2.3:o:juniper:junos:13.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71FB12AC-DB5A-444A-81E0-C0DDD06810EB"}, {"criteria": "cpe:2.3:o:juniper:junos:13.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CAB7D840-9469-4CE2-8DBF-017A44741374"}, {"criteria": "cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4AF5DAA-62F5-491F-A9CE-098970671D43"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}