CVE-2019-0027: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting XSS vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

CVE-2019-0018: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting XSS vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

CVE-2019-0029: Insertion of Sensitive Information into Log File

Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3...

PT-2019-1364

Name of the Vulnerable Software and Affected Versions Juniper ATP versions prior to 5.0.3 Description A persistent cross-site scripting XSS issue in the file upload menu may allow an authenticated user to inject arbitrary scripts, potentially stealing sensitive data and credentials from a web...

PT-2019-1142

Name of the Vulnerable Software and Affected Versions: Juniper ATP versions prior to 5.0.3 Description: The issue is related to the logging of sensitive keys in a file that can be read by authenticated local users. These keys are used for critical operations on the WebUI interface. The problem is...

PT-2019-1179

Name of the Vulnerable Software and Affected Versions Juniper Networks Juniper ATP version 5.0 prior to 5.0.3 Description The issue is related to hard-coded credentials in the Web Collector instance of Juniper ATP, allowing an attacker to gain full control of the software. The vulnerability can b...

PT-2019-1180

Name of the Vulnerable Software and Affected Versions Juniper Networks Juniper ATP versions prior to 5.0.3 Description The issue is related to hard-coded credentials in the Cyphort Core instance of Juniper ATP, allowing an attacker to gain full control of the software. It is also described as a...

PT-2019-1181

Name of the Vulnerable Software and Affected Versions Juniper ATP Series versions prior to 5.0.3 Description The issue is related to the storage of credentials in a file that can be accessed by authenticated local users, potentially allowing an attacker to access the Splunk server. This could...