Описание
A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper Networks Service Insight versions from 15.1R1, prior to 18.1R1. Service Now versions from 15.1R1, prior to 18.1R1.
Ссылки
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Release NotesVendor Advisory
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Одно из
EPSS
6.5 Medium
CVSS3
7.8 High
CVSS3
2.1 Low
CVSS2
Дефекты
Связанные уязвимости
A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper Networks Service Insight versions from 15.1R1, prior to 18.1R1. Service Now versions from 15.1R1, prior to 18.1R1.
Уязвимость программных средств для управления сетевыми ресурсами Junos Space Service Now и Junos Space Service Insight, связанная с ошибками управления регистрационными данными, позволяющая нарушителю получить доступ к сохраненным в виде открытого текста учетным данным
EPSS
6.5 Medium
CVSS3
7.8 High
CVSS3
2.1 Low
CVSS2