imPC@ndo IT

Tracker / CVE-2013-5096

CVE-2013-5096

Medium 4.0

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804.

Affected products and versions

juniper junos_space
juniper junos_space_ja1500_appliance
juniper junos_space_virtual_appliance

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References