PT-2019-1369

Name of the Vulnerable Software and Affected Versions Juniper ATP versions prior to 5.0.3 Description A persistent cross-site scripting XSS issue in the Snort Rules configuration may allow an authenticated user to inject arbitrary script, potentially stealing sensitive data and credentials from a...

PT-2019-1365

Name of the Vulnerable Software and Affected Versions Juniper ATP versions prior to 5.0.3 Description A persistent cross-site scripting XSS issue in the Golden VM menu of Juniper ATP may allow an authenticated user to inject arbitrary script, potentially stealing sensitive data and credentials fr...

PT-2019-1364

Name of the Vulnerable Software and Affected Versions Juniper ATP versions prior to 5.0.3 Description A persistent cross-site scripting XSS issue in the file upload menu may allow an authenticated user to inject arbitrary scripts, potentially stealing sensitive data and credentials from a web...

PT-2019-1367

Name of the Vulnerable Software and Affected Versions Juniper ATP versions prior to 5.0.3 Description The issue is related to insufficient input validation in the Zone configuration component of Juniper ATP, which may allow a remote attacker to inject arbitrary JavaScript code into a loaded page...

PT-2019-1366

Name of the Vulnerable Software and Affected Versions Juniper ATP versions prior to 5.0.3 Description A persistent cross-site scripting XSS issue in the RADIUS configuration menu may allow an authenticated user to inject arbitrary script, potentially stealing sensitive data and credentials from a...

CVE-2019-0030: Use of a Broken or Risky Cryptographic Algorithm

Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to 5.0.3...

CVE-2019-0018: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting XSS vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

PT-2019-1368

Name of the Vulnerable Software and Affected Versions Juniper ATP versions prior to 5.0.3 Description A persistent cross-site scripting XSS issue in the Email Collectors menu of Juniper ATP may allow an authenticated user to inject arbitrary script, potentially stealing sensitive data and...

CVE-2019-0027: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting XSS vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

CVE-2019-0020: Use of Hard-coded Credentials

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3...

CVE-2019-0022: Use of Hard-coded Credentials

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3...

CVE-2019-0023: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting XSS vulnerability in the Golden VM menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative...

PT-2019-1180

Name of the Vulnerable Software and Affected Versions Juniper Networks Juniper ATP versions prior to 5.0.3 Description The issue is related to hard-coded credentials in the Cyphort Core instance of Juniper ATP, allowing an attacker to gain full control of the software. It is also described as a...

PT-2019-1181

Name of the Vulnerable Software and Affected Versions Juniper ATP Series versions prior to 5.0.3 Description The issue is related to the storage of credentials in a file that can be accessed by authenticated local users, potentially allowing an attacker to access the Splunk server. This could...

PT-2019-1179

Name of the Vulnerable Software and Affected Versions Juniper Networks Juniper ATP version 5.0 prior to 5.0.3 Description The issue is related to hard-coded credentials in the Web Collector instance of Juniper ATP, allowing an attacker to gain full control of the software. The vulnerability can b...

PT-2019-1142

Name of the Vulnerable Software and Affected Versions: Juniper ATP versions prior to 5.0.3 Description: The issue is related to the logging of sensitive keys in a file that can be read by authenticated local users. These keys are used for critical operations on the WebUI interface. The problem is...

Be careful of data without context: The case of malware scanning of journaled emails

Recently, we shared details on how effectiveness is measured for Office 365 Exchange Online Protection EOP and Advanced Threat Protection ATP. We also followed up with a comprehensive update on Office 365s improved ability to stop phishing emails from impacting users. These reports highlighted:...

Windows Defender ATP has protections for USB and removable devices

Meet Jimmy. Jimmy is an employee in your company. He Does Things With Computers official title. Last Wednesday, as Jimmy got out of his car after parking in the company-owned parking lot, he saw something on the ground. That something is a 512GB USB flash drive! Jimmy picks up the drive, whistlin...

Tackling phishing with signal-sharing and machine learning

Across services in Microsoft Threat Protection, the correlation of security signals enhances the comprehensive and integrated security for identities, endpoints, user data, cloud apps, and infrastructure. Our industry-leading visibility into the entire attack chain translates to enriched protecti...

Microsoft AI competition explores the next evolution of predictive technologies in security

Predictive technologies are already effective at detecting and blocking malware at first sight. A new malware prediction competition on Kaggle will challenge the data science community to push these technologies even furtherto stop malware before it is even seen. The Microsoft-sponsored competiti...