Lucene search

JuniperCVE-2018-0046

HistoryOct 10, 2018 - 6:29 p.m.

CVE-2018-0046

2018-10-1018:29:00

CWE-79

juniper

web.nvd.nist.gov

cve-2018-0046

opennms

juniper networks

junos space

cross-site scripting

vulnerability

security

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

50.4%

JSON

A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space administrators or perform administrative actions. This issue affects Juniper Networks Junos Space versions prior to 18.2R1.

Affected configurations

Nvd

Node

juniperjunos_spaceMatch18.1r1

VendorProductVersionCPE
juniperjunos_space18.1r1cpe:2.3:a:juniper:junos_space:18.1r1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
juniper	junos_space	18.1r1	cpe:2.3:a:juniper:junos_space:18.1r1:::::::*

CNA Affected

[
  {
    "product": "Junos Space",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "18.2R1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105566

www.securitytracker.com/id/1041862

github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0d

kb.juniper.net/JSA10880

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

50.4%

JSON

Related for CVE-2018-0046