CVE-2019-0016
published 2019-01-15CVE-2019-0016: A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions…
PriorityP433medium6.5CVSS 3.0
AVNACLPRLUINSUCNIHAN
EPSS
0.93%
56.6th percentile
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| juniper | junos_os | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
VMware Cloud Foundation and VMware Harbor Container Registry for PCF address broken access control vulnerability (CVE-2019-16919)
vendor_vmware·2019-10-15·CVSS 7.5
CVE-2019-16919 [HIGH] VMware Cloud Foundation and VMware Harbor Container Registry for PCF address broken access control vulnerability (CVE-2019-16919)
VMSA-2019-0016: VMware Cloud Foundation and VMware Harbor Container Registry for PCF address broken access control vulnerability (CVE-2019-16919)
| Advisory Severity | Critical | Synopsis | VMware Cloud Foundation and VMware Harbor Container Registry for PCF address broken access control vulnerability (CVE-2019-16919) | Issue Date | 2019-10-15 | Updated On | 2019-12-11 | CVE(s) | CVE-2019-16919 VMware Cloud Foundation VMware Harbor Container Registry for PCF
CVEs: CVE-2019-16919
Affected products: VMware Cloud Foundation
Juniper
CVE-2019-0016: A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax inte
vendor_juniper·2019-01-15·CVSS 6.5
CVE-2019-0016 [MEDIUM] CVE-2019-0016: A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax inte
CVE-2019-0016: A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
GHSA
GHSA-2662-x873-f333: A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax inte
ghsa_unreviewed·2022-05-13
CVE-2019-0016 [MEDIUM] GHSA-2662-x873-f333: A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax inte
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-01-15
Published