CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.

Score

CVSS 2.0 4.7 Medium

Status

Modified - cve@mitre.org

Published

2013-05-08

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• Junos Space (Juniper)
• Junos Space Ja1500 Appliance (Juniper)
• Junos Space Virtual Appliance (Juniper)

References

• http://osvdb.org/93112
• http://www.securityfocus.com/bid/59760
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84109
• https://kb.juniper.net/KB27374