CVE-2019-0021

On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to view these secret information. This issue affects Juniper ATP 5.0 versions prior to 5.0.4.

CVSS v3 7.1 HIGH
CVSS v2.0 2.1 LOW

7.1^/10

CVSS v3 : HIGH

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://kb.juniper.net/JSA10918	Vendor Advisory
https://kb.juniper.net/JSA10918	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:juniper:advanced_threat_prevention:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:juniper:atp400:-:::::::*
	cpe:2.3:h:juniper:atp700:-:::::::*

History

21 Nov 2024, 04:16

Type	Values Removed	Values Added
References	~~() https://kb.juniper.net/JSA10918 - Vendor Advisory~~	() https://kb.juniper.net/JSA10918 - Vendor Advisory
CVSS	v2 : ~~2.1~~ v3 : ~~5.5~~	v2 : 2.1 v3 : 7.1

Information

Published : 2019-01-15 21:29

Updated : 2024-11-21 04:16

NVD link : CVE-2019-0021

Mitre link : CVE-2019-0021

CVE.ORG link : CVE-2019-0021

JSON object : View

Products Affected

juniper

advanced_threat_prevention
atp700
atp400

CWE

CWE-532

Insertion of Sensitive Information into Log File

{"id": "CVE-2019-0021", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "sirt@juniper.net", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2019-01-15T21:29:01.637", "references": [{"url": "https://kb.juniper.net/JSA10918", "tags": ["Vendor Advisory"], "source": "sirt@juniper.net"}, {"url": "https://kb.juniper.net/JSA10918", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "sirt@juniper.net", "description": [{"lang": "en", "value": "CWE-532"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "On Juniper ATP, secret passphrase CLI inputs, such as \"set mcm\", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to view these secret information. This issue affects Juniper ATP 5.0 versions prior to 5.0.4."}, {"lang": "es", "value": "En Juniper ATP, las entradas CLI de frase de contrase\u00f1a, como \"set mcm\", se registran en /var/log/syslog en texto claro, lo que permite que un usuario local autenticado visualice esta informaci\u00f3n secreta. Este problema afecta a Juniper ATP en versiones 5.0 anteriores a la 5.0.4."}], "lastModified": "2024-11-21T04:16:04.067", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:advanced_threat_prevention:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39270838-64F0-4E1E-80FD-0F48C47B16F8", "versionEndExcluding": "5.0.4", "versionStartIncluding": "5.0.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:juniper:atp400:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0A96949A-031D-4E05-8915-1A6D6BE645E0"}, {"criteria": "cpe:2.3:h:juniper:atp700:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "29D8A7A3-2DFB-4752-8509-451247A1D5D1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "sirt@juniper.net"}