CVE-2013-5096

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804.

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2013-08-16

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Junos Space (Juniper)
• Junos Space Ja1500 Appliance (Juniper)
• Junos Space Virtual Appliance (Juniper)

References

• http://kb.juniper.net/JSA10585
• http://www.securityfocus.com/bid/61794
• http://www.securitytracker.com/id/1028923