CVE-2019-0016

A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.

Score

CVSS 3.0 6.5 Medium

Status

Modified - sirt@juniper.net

Published

2019-01-15

Last modified

2024-09-16

Weaknesses

CWE-284

Affected products

• Junos Space (Juniper)
• Junos Space (Juniper Networks)

References

• https://kb.juniper.net/JSA10917