CVE-2019-0022

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3.

Score

CVSS 3.0 10.0 Critical

Status

Modified - sirt@juniper.net

Published

2019-01-15

Last modified

2024-09-16

Weaknesses

CWE-798

Affected products

• Advanced Threat Prevention (Juniper)
• Juniper Atp (Juniper Networks)

References

• https://kb.juniper.net/JSA10918