Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hrjj-p4r3-74mg

Опубликовано: 18 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 version 20.2R1 and later versions prior to 21.2R1 on cSRX Series.

On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 version 20.2R1 and later versions prior to 21.2R1 on cSRX Series.

EPSS

Процентиль: 22%
0.00071
Низкий

7.8 High

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 7.8
nvd
больше 3 лет назад

On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 version 20.2R1 and later versions prior to 21.2R1 on cSRX Series.

CVSS3: 7.8
fstec
больше 3 лет назад

Уязвимость файловой системы контейнера операционных систем Juniper Networks Junos OS маршрутизаторов серии cSRX, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 22%
0.00071
Низкий

7.8 High

CVSS3

Дефекты

CWE-522