CVE-2019-0017
published 2019-01-15CVE-2019-0017: The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images…
PriorityP345high8.8CVSS 3.0
AVNACLPRLUINSUCHIHAH
EPSS
1.10%
62.1th percentile
The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| juniper | junos_os | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
| juniper | junos_space | — | — |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v5hc-28pc-qw2m: The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious
ghsa_unreviewed·2022-05-13
CVE-2019-0017 [HIGH] CWE-434 GHSA-v5hc-28pc-qw2m: The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious
The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Juniper
CVE-2019-0017: The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious
vendor_juniper·2019-01-15·CVSS 6.5
CVE-2019-0017 [MEDIUM] CWE-434 CVE-2019-0017: The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious
CVE-2019-0017: The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-01-15
Published