ID
VAR-202101-1688
CVE
CVE-2021-0210
TITLE
Juniper Networks Junos OS Information Disclosure Vulnerability
Trust: 0.8
DESCRIPTION
An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target system through opportunistic use of an authenticated users session. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S17; 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3, 19.2R3-S1; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2. Juniper Networks Junos OS Contains an information disclosure vulnerability.Information may be obtained and information may be tampered with. Juniper Networks Junos OS is a set of network operating system of Juniper Networks (Juniper Networks) dedicated to the company's hardware equipment. The operating system provides a secure programming interface and Junos SDK. Junos OS has security vulnerabilities. An attacker can exploit this vulnerability to bypass restrictions through Junos' J-Web to escalate his privileges
Trust: 1.71
AFFECTED PRODUCTS
| vendor: | juniper | model: | junos | scope: | eq | version: | 19.2 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 20.1 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 18.2 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 20.2 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 18.3 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 12.3 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 18.4 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 19.3 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 17.3 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 19.1 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 19.4 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 17.4 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 18.1 | Trust: 1.0 |
| vendor: | ジュニパーネットワークス | model: | junos os | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | ジュニパーネットワークス | model: | junos os | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-200 | Trust: 1.1 |
| problemtype: | information leak (CWE-200) [NVD Evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
information disclosure
Trust: 0.6
PATCH
| title: | JSA11100 | url: | https://kb.juniper.net/JSA11100 | Trust: 0.8 |
| title: | Juniper Networks Junos OS Repair measures for information disclosure vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=139554 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-0210 | Trust: 2.5 |
| db: | JUNIPER | id: | JSA11100 | Trust: 1.7 |
| db: | JVNDB | id: | JVNDB-2021-002497 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202101-1113 | Trust: 0.7 |
| db: | VULHUB | id: | VHN-372112 | Trust: 0.1 |
REFERENCES
| url: | https://kb.juniper.net/jsa11100 | Trust: 1.7 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-0210 | Trust: 1.4 |
| url: | https://vigilance.fr/vulnerability/junos-os-privilege-escalation-via-j-web-34330 | Trust: 0.6 |
SOURCES
| db: | VULHUB | id: | VHN-372112 |
| db: | JVNDB | id: | JVNDB-2021-002497 |
| db: | CNNVD | id: | CNNVD-202101-1113 |
| db: | NVD | id: | CVE-2021-0210 |
LAST UPDATE DATE
2024-11-23T22:47:42.992000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-372112 | date: | 2021-02-05T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-002497 | date: | 2021-09-17T07:55:00 |
| db: | CNNVD | id: | CNNVD-202101-1113 | date: | 2021-01-25T00:00:00 |
| db: | NVD | id: | CVE-2021-0210 | date: | 2024-11-21T05:42:12.747 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-372112 | date: | 2021-01-15T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-002497 | date: | 2021-09-17T00:00:00 |
| db: | CNNVD | id: | CNNVD-202101-1113 | date: | 2021-01-13T00:00:00 |
| db: | NVD | id: | CVE-2021-0210 | date: | 2021-01-15T18:15:15.090 |