Design/Logic Flaw

A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1...

Code injection

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all versions of Junos OS Evolved prior to 19.1R1...

Design/Logic Flaw

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1...

CVE-2020-1638

The CVE-2020-1638 issue affects Juniper Junos OS and Junos OS Evolved FPCs in MX Series (MPC10E/MPC11E) and PTX10001/PTX10003 lines, where processing a specific IPv4 packet can trigger an FPC restart and drop all traffic via the FPC, causing a sustained DoS. Affected ranges include: Junos OS on M...

CVE-2020-1626

CVE-2020-1626 affects Juniper Networks Junos OS Evolved prior to 19.1R1-EVO. A DoS can be triggered by a high-rate sequence of specific packets that crashes the pfemand process (responsible for packet forwarding), causing sustained availability impact. The issue is traffic-triggered and only affe...

CVE-2020-1623 Junos OS Evolved: ev.ops file may leak sensitive information

A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1...

CVE-2020-1624 Junos OS Evolved: objmon logs may leak sensitive information

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1...

CVE-2020-1624

CVE-2020-1624 affects Junos OS Evolved prior to 19.1R1. A local, authenticated user can access raw objmon configuration files and obtain hashed values of login passwords and shared secrets, leaking sensitive information. The impact is confined to confidentiality of credentials via object monitori...

CVE-2020-1623

CVE-2020-1623 affects Junos OS Evolved prior to 19.2R1. A local, authenticated user can view sensitive information from the ev.ops configuration file, leaking data with partial confidentiality impact (per CVSS v2) and high confidentiality impact (per CVSS v3.1). Exploitation details are not provi...

CVE-2020-1621

CVE-2020-1621 affects Juniper Networks Junos OS Evolved prior to 19.3R1. A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces, indicating a confidentiality impact through leakage of credentials. The vulnerability originates from exposed log/tra...

CVE-2020-1622

Junos OS Evolved is affected. A local, authenticated user can access the EvoSharedObjStore and obtain hashed login passwords and shared secrets, leaking confidential data. Affected versions are all prior to 19.1R1; remediation is to upgrade to 19.1R1 or later. Exploitation status is not detailed ...

CVE-2020-1620 Junos OS Evolved: Configd leaks hashes via log file and is world readable

A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1...

CVE-2020-1620

CVE-2020-1620 : A local, authenticated user can obtain hashed login passwords via the configd streamer log in Juniper Networks Junos OS Evolved before version 19.3R1. Affected component: configd streamer log. Root cause: disclosure of password hashes through log output. Impact: confidential data ...

PT-2020-4135

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.1R1-EVO Description: A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service DoS by sending a high rate of specific packets to the device, resulting in a...

CVE-2020-1623: Insertion of Sensitive Information into Log File

A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1...

PT-2020-4133

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.2R1 Description: The issue is related to insufficient protection of registration data in the ev.ops configuration file. This allows a local, authenticated user with shell access to view sensitive...

PT-2020-4132

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.1R1 Description: The issue is related to insufficient protection of registration data in the EvoSharedObjStore component of the Junos OS Evolved operating system. A local, authenticated user with shell...

PT-2020-4130

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.3R1 Description: The issue is related to insufficient protection of registration data in the configd Streamer Log component of the JunOS Evolved operating system. Exploitation of this issue may allow an...

PT-2020-4131

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.3R1 Description: The issue is related to insufficient protection of registration data in the configd Trace Handler component of the JunOS Evolved operating system. It allows a local, authenticated user wi...

PT-2020-4134

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.1R1 Description: The issue is related to insufficient protection of registration data in the objmon configuration file of the JunOS Evolved operating system. Exploitation of this issue may allow an attack...