CVE-2013-3497 — Juniper Junos Space vulnerability

CWE-2554 documents4 sources
Severity
4.7MEDIUMNVD
EPSS
0.1%
top 77.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Juniper Junos Space
Timeline
PublishedMay 8
Latest updateMay 17

Description

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.

CVSS vector

AV:L/AC:M/C:C/I:N/A:NExploitability: 3.4 | Impact: 6.9

Affected Packages1 packages

▶NVDjuniper/junos_space12.3+12

🔴Vulnerability Details

2
GHSA
GHSA-j7h6-hf6p-fgpj: Juniper Junos Space before 12↗2022-05-17
▶
CVEList
CVE-2013-3497: Juniper Junos Space before 12↗2013-05-08
▶

📋Vendor Advisories

1
Juniper
CVE-2013-3497: Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, whic↗2013-05-08
▶
CVE-2013-3497 — Juniper Junos Space vulnerability | cvebase