CVE-2020-1611

CWE-200 — Information Exposure4 documents4 sources
Severity
6.5MEDIUM
EPSS
5.4%
top 9.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Juniper Networks Junos SpaceJuniper Junos Space
Timeline
PublishedJan 15
Latest updateMay 24

Description

A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5juniper_networks/junos_spaceunspecified — 19.4R1
▶NVDjuniper/junos_space9 versions+8

🔴Vulnerability Details

2
GHSA
GHSA-3wvp-p4cg-5fwm: A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malic↗2022-05-24
▶
CVEList
Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.↗2020-01-15
▶

📋Vendor Advisories

1
Juniper
CVE-2020-1611: A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malic↗2020-01-15
▶
CVE-2020-1611 (MEDIUM CVSS 6.5) | A Local File Inclusion vulnerabilit | cvebase.io