CVE-2019-0029

Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
References
Link Resource
https://kb.juniper.net/JSA10918 Vendor Advisory
https://kb.juniper.net/JSA10918 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:juniper:advanced_threat_prevention:*:*:*:*:*:*:*:*
OR cpe:2.3:h:juniper:atp400:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:atp700:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:16

Type Values Removed Values Added
CVSS v2 : 2.1
v3 : 7.8
v2 : 2.1
v3 : 8.8
References () https://kb.juniper.net/JSA10918 - Vendor Advisory () https://kb.juniper.net/JSA10918 - Vendor Advisory

Information

Published : 2019-01-15 21:29

Updated : 2024-11-21 04:16


NVD link : CVE-2019-0029

Mitre link : CVE-2019-0029

CVE.ORG link : CVE-2019-0029


JSON object : View

Products Affected

juniper

  • atp400
  • atp700
  • advanced_threat_prevention
CWE
CWE-532

Insertion of Sensitive Information into Log File