CVE-2019-0004

On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI interface. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

Score

CVSS 3.0 7.8 High

Status

Modified - sirt@juniper.net

Published

2019-01-15

Last modified

2024-09-16

Weaknesses

CWE-532

Affected products

• Advanced Threat Prevention (Juniper)
• Juniper Atp (Juniper Networks)

References

• https://kb.juniper.net/JSA10918