CVE-2019-0073

🗓️ 09 Oct 2019 20:15:18Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 18 Views

PKI keys export command in Junos OS may have insecure permissions, allowing unauthorized acces

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the JunOS operating system arises from insecure access rights to key files exported using the “run request security pki key-pair export” command. This allows a malicious individual to gain unauthorized read and modify access to data.	29 Oct 201900:00	–	bdu_fstec
CNVD	Unspecified Vulnerability in Juniper Networks Junos OS (CNVD-2019-41472)	14 Nov 201900:00	–	cnvd
CVE	CVE-2019-0073	9 Oct 201919:26	–	cve
Cvelist	CVE-2019-0073 Junos OS: PKI key pairs are exported with insecure file permissions	9 Oct 201919:26	–	cvelist
EUVD	EUVD-2019-0880	7 Oct 202500:30	–	euvd
Tenable Nessus	Juniper JSA10970	29 Jan 202000:00	–	nessus
Tenable Nessus	Junos OS: Insecure PKI key pair export file permissions (JSA10974)	5 Nov 201900:00	–	nessus
OSV	CVE-2019-0073	9 Oct 201920:15	–	osv
Prion	Design/Logic Flaw	9 Oct 201920:15	–	prion
Symantec	Juniper Junos CVE-2019-0073 Local Insecure File Permissions Vulnerability	9 Oct 201900:00	–	symantec

NVD

Node

juniper junosMatch15.1x49-

OR

juniper junosMatch15.1x49d10

OR

juniper junosMatch15.1x49d100

OR

juniper junosMatch15.1x49d110

OR

juniper junosMatch15.1x49d120

OR

juniper junosMatch15.1x49d130

OR

juniper junosMatch15.1x49d140

OR

juniper junosMatch15.1x49d150

OR

juniper junosMatch15.1x49d160

OR

juniper junosMatch15.1x49d170

OR

juniper junosMatch15.1x49d20

OR

juniper junosMatch15.1x49d30

OR

juniper junosMatch15.1x49d35

OR

juniper junosMatch15.1x49d40

OR

juniper junosMatch15.1x49d45

OR

juniper junosMatch15.1x49d50

OR

juniper junosMatch15.1x49d55

OR

juniper junosMatch15.1x49d60

OR

juniper junosMatch15.1x49d65

OR

juniper junosMatch15.1x49d70

OR

juniper junosMatch15.1x49d75

OR

juniper junosMatch15.1x49d80

OR

juniper junosMatch15.1x49d90

Node

juniper junosMatch17.3-

OR

juniper junosMatch17.3r1

OR

juniper junosMatch17.3r2

OR

juniper junosMatch17.3r2-s1

OR

juniper junosMatch17.3r2-s2

OR

juniper junosMatch17.3r3

OR

juniper junosMatch17.3r3-s1

OR

juniper junosMatch17.3r3-s2

OR

juniper junosMatch17.3r3-s3

OR

juniper junosMatch17.3r3-s4

OR

juniper junosMatch17.3r3-s5

OR

juniper junosMatch17.3r3-s6

Node

juniper junosMatch17.4-

OR

juniper junosMatch17.4r1

OR

juniper junosMatch17.4r1-s1

OR

juniper junosMatch17.4r1-s2

OR

juniper junosMatch17.4r1-s4

OR

juniper junosMatch17.4r1-s6

OR

juniper junosMatch17.4r1-s7

OR

juniper junosMatch17.4r2

OR

juniper junosMatch17.4r2-s1

OR

juniper junosMatch17.4r2-s3

OR

juniper junosMatch17.4r2-s4

OR

juniper junosMatch17.4r2-s5

OR

juniper junosMatch17.4r2-s6

OR

juniper junosMatch17.4r2-s7

Node

juniper junosMatch18.1-

OR

juniper junosMatch18.1r2

OR

juniper junosMatch18.1r2-s1

OR

juniper junosMatch18.1r2-s2

OR

juniper junosMatch18.1r2-s4

OR

juniper junosMatch18.1r3

OR

juniper junosMatch18.1r3-s2

OR

juniper junosMatch18.1r3-s3

OR

juniper junosMatch18.1r3-s4

OR

juniper junosMatch18.1r3-s5

OR

juniper junosMatch18.1r3-s6

OR

juniper junosMatch18.1r3-s7

Node

juniper junosMatch18.2-

OR

juniper junosMatch18.2r1-s5

OR

juniper junosMatch18.2r2

OR

juniper junosMatch18.2r2-s1

OR

juniper junosMatch18.2r2-s2

OR

juniper junosMatch18.2r2-s3

OR

juniper junosMatch18.2r2-s4

Node

juniper junosMatch18.3-

OR

juniper junosMatch18.3r1

OR

juniper junosMatch18.3r1-s1

OR

juniper junosMatch18.3r1-s2

OR

juniper junosMatch18.3r1-s3

Node

juniper junosMatch18.4-

OR

juniper junosMatch18.4r1

OR

juniper junosMatch18.4r1-s2

Source	Link
kb	www.kb.juniper.net/JSA10974

21 Nov 2024 04:16Current

6.6Medium risk

Vulners AI Score6.6

CVSS 22.1

CVSS 3.16.6 - 7.1

EPSS0.00033

CWE-732 CWE-281

pki keys junos os insecure permissions unauthorized access cve-2019-0073