An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions prior to 12.3X48-D20 on SRX Series; 12.3 versions prior to 12.3R11 on EX Series; 14.1X53 versions prior to 14.1X53-D30 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100;; 15.1X49 versions prior to 15.1X49-D20 on SRX Series.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/104718 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1041314 | Third Party Advisory VDB Entry |
| https://kb.juniper.net/JSA10857 | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
History
No history.
Information
Published : 2018-07-11 18:29
Updated : 2023-12-10 12:44
NVD link : CVE-2018-0024
Mitre link : CVE-2018-0024
CVE.ORG link : CVE-2018-0024
JSON object : View
Products Affected
juniper
- srx300
- srx345
- ex4300
- srx5400
- ex2200-c
- ex4550\/vc
- ex2300
- srx5600
- srx5800
- ex2300-c
- ex4600
- ex9200
- ex3300
- srx110
- ex3300\/vc
- qfx5100
- srx3600
- qfx3500
- qfx3600
- srx240
- srx1500
- ex3400
- srx100
- srx1400
- ex3200
- ex6200
- srx4100
- ex2200
- ex4550
- srx650
- junos
- srx4200
- srx220
- ex4200
- ex2200\/vc
- srx320
- srx210
- srx550
- ex8200\/vc_\(xre\)
- srx3400
- srx340
- ex_rps
CWE
CWE-269
Improper Privilege Management