Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hrrq-73fq-jh5m

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the "partition" option.

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the "partition" option.

EPSS

Процентиль: 14%
0.00047
Низкий

7.8 High

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 7.8
nvd
больше 9 лет назад

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the "partition" option.

EPSS

Процентиль: 14%
0.00047
Низкий

7.8 High

CVSS3

Дефекты

CWE-287