CVE-2019-0029

Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
References
Link Resource
https://kb.juniper.net/JSA10918 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:juniper:advanced_threat_prevention:*:*:*:*:*:*:*:*
OR cpe:2.3:h:juniper:atp400:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:atp700:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-01-15 21:29

Updated : 2024-02-28 16:48


NVD link : CVE-2019-0029

Mitre link : CVE-2019-0029

CVE.ORG link : CVE-2019-0029


JSON object : View

Products Affected

juniper

  • atp400
  • advanced_threat_prevention
  • atp700
CWE
CWE-532

Insertion of Sensitive Information into Log File