Juniper Secure Access SSL VPN Privilege Escalation Vulnerability

Certain Secure Access SA Series SSL VPN products originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC allow privilege escalation, as demonstrated by Secure Access SSL VPN SA-4000 5.1R5 build 9627 4.2 Release build 7631. This occurs because appropriate controls...

Juniper Secure Access SSL VPN Privilege Escalation

In 2006...

Privilege escalation

Certain Secure Access SA Series SSL VPN products originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC allow privilege escalation, as demonstrated by Secure Access SSL VPN SA-4000 5.1R5 build 9627 4.2 Release build 7631. This occurs because appropriate controls...

CVE-2018-20193

Certain Secure Access SA Series SSL VPN products originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC allow privilege escalation, as demonstrated by Secure Access SSL VPN SA-4000 5.1R5 build 9627 4.2 Release build 7631. This occurs because appropriate controls...

CVE-2018-20193

CVE-2018-20193 affects Secure Access SSL VPN SA Series (notably SA-4000 5.1R5 build 9627 / 4.2 Release build 7631). Description: a privilege-escalation flaw where a readonly user can change the administrator password by cloning and modifying the /dana-admin/user/update.cgi page and saving changes...

The vulnerability of the OpenNMS monitoring system, a network management platform from Juniper Networks Junos Space, arises due to insufficient protection of the website structure. This allows attackers to disclose protected information or perform actions on behalf of the administrator.

The vulnerability of OpenNMS, which is included in the Juniper Networks Junos Space network management platform, stems from insufficient protection of the website structure. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or carry out actions on behalf ...

The vulnerability of the Juniper Device Manager (JDM) operating system, allowing a hacker to gain full access to the device

The vulnerability of the Juniper Device Manager JDM operating system is related to the use of a default password for SSHD. Exploiting this vulnerability can allow an attacker to gain full access to the device...

The vulnerability of the JunOS operating system in Juniper switches of the QFX5000 and EX4600 series allows a hacker to cause maintenance failures.

The vulnerability of the JunOS operating system in Juniper switches of the QFX5000 and EX4600 series is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Routing Protocols Daemon (RPD) service on the JunOS operating system allows a hacker to trigger a service failure.

The vulnerability of the Routing Protocols Daemon RPD service on the JunOS operating system is related to an uncontrolled memory consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2018-2984

Name of the Vulnerable Software and Affected Versions juniper/libslax version as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Description The issue is related to a buffer overflow in the slaxGetInput function, located in the slaxlexer.c component. This can be exploited to cause a remote...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2018-21801)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in Juniper Junos OS, which arises from the program's failure to restrict the IP...

Juniper Junos RPD MPLS RCE (JSA10877)

According to its self-reported version number, the remote Junos device is affected by a potential remote code execution vulnerability due to how the routing protocol daemon handles MPLS packets. An attacker could potentially crash the RDP service or execute code. TRUSTED...

Juniper Device Manager Unauthorized Access Vulnerability

Juniper NFX Series is an NFX Series network security appliance from Juniper Networks, Inc. Juniper Device Manager JDM is one of the device management components; host OS is one of the host operating systems. A security vulnerability exists in Juniper Device Manager JDM and host OS on Juniper NFX...

OpenNMS Cross-Site Scripting Vulnerability (CNVD-2018-21611)

Juniper Junos Space is a suite of network management solutions from Juniper Networks that supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. OpenNMS is a network management system that automates the configuration, monitoring, and...

Juniper Junos Memory Exhaustion RDP DOS with JET support (JSA10882)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability due to a flaw with the Routing Protocols Daemon with Juniper Extension Toolkit support. A remote attacker could exhaust memory resources potentially causing the device to become...

Juniper ScreenOS < 6.3.0r26 Stored Cross Site Scripting Vulnerability (JSA10894)

The version of Juniper ScreenOS running on the remote host is 6.3.x prior to 6.3.0r26. It is, therefore, affected by stored cross site scripting vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. C Tenable...

CVE-2018-0058

Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of Broadband Edge BBE client route processing on MX Series subscriber management platforms, introduced by the Tomcat Next...

CVE-2018-0059

A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

CVE-2018-0060

An improper input validation weakness in the device control daemon process dcd of Juniper Networks Junos OS allows an attacker to cause a Denial of Service to the dcd process and interfaces and connected clients when the Junos device is requesting an IP address for itself. Junos devices are not...

CVE-2018-0062

A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service which may prevent other users to authenticate or to perform J-Web operations. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series;...