Lucene search
HistoryOct 09, 2019 - 8:15 p.m.
CVE-2019-0062
vulnerability
j-web
junos os
session fixation
hijack
administrative access
cve-2019-0062
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.8%
A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administrators web session and potentially gain administrative access to the device. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S15 on EX Series; 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 14.1X53 versions prior to 14.1X53-D51; 15.1 versions prior to 15.1F6-S13, 15.1R7-S5; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238; 16.1 versions prior to 16.1R4-S13, 16.1R7-S5; 16.2 versions prior to 16.2R2-S10; 17.1 versions prior to 17.1R3-S1; 17.2 versions prior to 17.2R2-S8, 17.2R3-S3; 17.3 versions prior to 17.3R3-S5; 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S2, 19.1R2.
Affected configurations
Node
juniperjunosMatch12.3-
ORjuniperjunosMatch12.3r1
ORjuniperjunosMatch12.3r11
ORjuniperjunosMatch12.3r12
ORjuniperjunosMatch12.3r12-s13
ORjuniperjunosMatch12.3r12-s14
ORjuniperjunosMatch12.3r2
ORjuniperjunosMatch12.3r3
ORjuniperjunosMatch12.3r4
ORjuniperjunosMatch12.3r5
ORjuniperjunosMatch12.3r6
ORjuniperjunosMatch12.3r7
ORjuniperjunosMatch12.3r8
ORjuniperjunosMatch12.3r9
juniperex2200Match-
ORjuniperex2200-cMatch-
ORjuniperex2300Match-
ORjuniperex2300-cMatch-
ORjuniperex3200Match-
ORjuniperex3300Match-
ORjuniperex3400Match-
ORjuniperex4200Match-
ORjuniperex4300Match-
ORjuniperex4500Match-
ORjuniperex4550Match-
ORjuniperex4600Match-
ORjuniperex4650Match-
ORjuniperex6210Match-
ORjuniperex8208Match-
ORjuniperex8216Match-
ORjuniperex9204Match-
ORjuniperex9208Match-
ORjuniperex9214Match-
ORjuniperex9251Match-
ORjuniperex9253Match-
Node
juniperjunosMatch12.3x48-
ORjuniperjunosMatch12.3x48d10
ORjuniperjunosMatch12.3x48d15
ORjuniperjunosMatch12.3x48d20
ORjuniperjunosMatch12.3x48d25
ORjuniperjunosMatch12.3x48d30
ORjuniperjunosMatch12.3x48d35
ORjuniperjunosMatch12.3x48d40
ORjuniperjunosMatch12.3x48d45
ORjuniperjunosMatch12.3x48d50
ORjuniperjunosMatch12.3x48d55
ORjuniperjunosMatch12.3x48d60
ORjuniperjunosMatch12.3x48d65
ORjuniperjunosMatch12.3x48d70
ORjuniperjunosMatch12.3x48d75
ORjuniperjunosMatch12.3x48d80
junipercsrxMatch-
ORjunipersrx100Match-
ORjunipersrx110Match-
ORjunipersrx1400Match-
ORjunipersrx1500Match-
ORjunipersrx210Match-
ORjunipersrx220Match-
ORjunipersrx240Match-
ORjunipersrx300Match-
ORjunipersrx320Match-
ORjunipersrx340Match-
ORjunipersrx3400Match-
ORjunipersrx345Match-
ORjunipersrx3600Match-
ORjunipersrx4100Match-
ORjunipersrx4200Match-
ORjunipersrx4600Match-
ORjunipersrx5400Match-
ORjunipersrx550Match-
ORjunipersrx550_hmMatch-
ORjunipersrx5600Match-
ORjunipersrx5800Match-
ORjunipersrx650Match-
ORjunipervsrxMatch-
Node
juniperjunosMatch14.1x53-
ORjuniperjunosMatch14.1x53d10
ORjuniperjunosMatch14.1x53d15
ORjuniperjunosMatch14.1x53d16
ORjuniperjunosMatch14.1x53d25
ORjuniperjunosMatch14.1x53d26
ORjuniperjunosMatch14.1x53d27
ORjuniperjunosMatch14.1x53d30
ORjuniperjunosMatch14.1x53d35
ORjuniperjunosMatch14.1x53d40
ORjuniperjunosMatch14.1x53d45
ORjuniperjunosMatch14.1x53d48
ORjuniperjunosMatch14.1x53d49
Node
juniperjunosMatch15.1-
ORjuniperjunosMatch15.1f1
ORjuniperjunosMatch15.1f2
ORjuniperjunosMatch15.1f2-s1
ORjuniperjunosMatch15.1f2-s2
ORjuniperjunosMatch15.1f2-s3
ORjuniperjunosMatch15.1f2-s4
ORjuniperjunosMatch15.1f3
ORjuniperjunosMatch15.1f4
ORjuniperjunosMatch15.1f5
ORjuniperjunosMatch15.1f6
ORjuniperjunosMatch15.1f6-s3
ORjuniperjunosMatch15.1r1
ORjuniperjunosMatch15.1r2
ORjuniperjunosMatch15.1r3
ORjuniperjunosMatch15.1r4
ORjuniperjunosMatch15.1r4-s9
ORjuniperjunosMatch15.1r5
ORjuniperjunosMatch15.1r6
ORjuniperjunosMatch15.1r6-s6
ORjuniperjunosMatch15.1r7-s1
ORjuniperjunosMatch15.1r7-s2
ORjuniperjunosMatch15.1r7-s3
Node
juniperjunosMatch15.1x49-
ORjuniperjunosMatch15.1x49d10
ORjuniperjunosMatch15.1x49d100
ORjuniperjunosMatch15.1x49d110
ORjuniperjunosMatch15.1x49d120
ORjuniperjunosMatch15.1x49d130
ORjuniperjunosMatch15.1x49d140
ORjuniperjunosMatch15.1x49d150
ORjuniperjunosMatch15.1x49d160
ORjuniperjunosMatch15.1x49d170
ORjuniperjunosMatch15.1x49d20
ORjuniperjunosMatch15.1x49d30
ORjuniperjunosMatch15.1x49d35
ORjuniperjunosMatch15.1x49d40
ORjuniperjunosMatch15.1x49d45
ORjuniperjunosMatch15.1x49d50
ORjuniperjunosMatch15.1x49d55
ORjuniperjunosMatch15.1x49d60
ORjuniperjunosMatch15.1x49d65
ORjuniperjunosMatch15.1x49d70
ORjuniperjunosMatch15.1x49d75
ORjuniperjunosMatch15.1x49d80
junipercsrxMatch-
ORjunipersrx100Match-
ORjunipersrx110Match-
ORjunipersrx1400Match-
ORjunipersrx1500Match-
ORjunipersrx210Match-
ORjunipersrx220Match-
ORjunipersrx240Match-
ORjunipersrx300Match-
ORjunipersrx320Match-
ORjunipersrx340Match-
ORjunipersrx3400Match-
ORjunipersrx345Match-
ORjunipersrx3600Match-
ORjunipersrx4100Match-
ORjunipersrx4200Match-
ORjunipersrx4600Match-
ORjunipersrx5400Match-
ORjunipersrx550Match-
ORjunipersrx550_hmMatch-
ORjunipersrx5600Match-
ORjunipersrx5800Match-
ORjunipersrx650Match-
ORjunipervsrxMatch-
Node
juniperjunosMatch15.1x53-
ORjuniperjunosMatch15.1x53d20
ORjuniperjunosMatch15.1x53d21
ORjuniperjunosMatch15.1x53d210
ORjuniperjunosMatch15.1x53d25
ORjuniperjunosMatch15.1x53d30
ORjuniperjunosMatch15.1x53d31
ORjuniperjunosMatch15.1x53d32
ORjuniperjunosMatch15.1x53d33
ORjuniperjunosMatch15.1x53d34
ORjuniperjunosMatch15.1x53d40
ORjuniperjunosMatch15.1x53d45
ORjuniperjunosMatch15.1x53d56
ORjuniperjunosMatch15.1x53d60
ORjuniperjunosMatch15.1x53d61
ORjuniperjunosMatch15.1x53d62
ORjuniperjunosMatch15.1x53d63
ORjuniperjunosMatch15.1x53d65
ORjuniperjunosMatch15.1x53d70
Node
juniperjunosMatch16.1-
ORjuniperjunosMatch16.1r1
ORjuniperjunosMatch16.1r2
ORjuniperjunosMatch16.1r3
ORjuniperjunosMatch16.1r3-s10
ORjuniperjunosMatch16.1r4
ORjuniperjunosMatch16.1r5-s4
ORjuniperjunosMatch16.1r6-s1
ORjuniperjunosMatch16.1r7
ORjuniperjunosMatch16.1r7-s4
Node
juniperjunosMatch16.2-
ORjuniperjunosMatch16.2r1
ORjuniperjunosMatch16.2r2
ORjuniperjunosMatch16.2r2-s1
ORjuniperjunosMatch16.2r2-s2
ORjuniperjunosMatch16.2r2-s5
ORjuniperjunosMatch16.2r2-s6
ORjuniperjunosMatch16.2r2-s7
ORjuniperjunosMatch16.2r2-s8
ORjuniperjunosMatch16.2r2-s9
Node
juniperjunosMatch17.1-
ORjuniperjunosMatch17.1r1
ORjuniperjunosMatch17.1r2
ORjuniperjunosMatch17.1r2-s1
ORjuniperjunosMatch17.1r2-s10
ORjuniperjunosMatch17.1r2-s2
ORjuniperjunosMatch17.1r2-s3
ORjuniperjunosMatch17.1r2-s4
ORjuniperjunosMatch17.1r2-s5
ORjuniperjunosMatch17.1r2-s6
ORjuniperjunosMatch17.1r2-s7
ORjuniperjunosMatch17.1r3
Node
juniperjunosMatch17.2-
ORjuniperjunosMatch17.2r1
ORjuniperjunosMatch17.2r1-s2
ORjuniperjunosMatch17.2r1-s4
ORjuniperjunosMatch17.2r1-s7
ORjuniperjunosMatch17.2r1-s8
ORjuniperjunosMatch17.2r2-s6
ORjuniperjunosMatch17.2r2-s7
ORjuniperjunosMatch17.2r3-s1
ORjuniperjunosMatch17.2r3-s2
Node
juniperjunosMatch17.3-
ORjuniperjunosMatch17.3r2
ORjuniperjunosMatch17.3r2-s1
ORjuniperjunosMatch17.3r2-s2
ORjuniperjunosMatch17.3r3-s1
ORjuniperjunosMatch17.3r3-s2
ORjuniperjunosMatch17.3r3-s3
ORjuniperjunosMatch17.3r3-s4
Node
juniperjunosMatch17.4-
ORjuniperjunosMatch17.4r1
ORjuniperjunosMatch17.4r1-s1
ORjuniperjunosMatch17.4r1-s2
ORjuniperjunosMatch17.4r1-s4
ORjuniperjunosMatch17.4r1-s6
ORjuniperjunosMatch17.4r1-s7
ORjuniperjunosMatch17.4r2
ORjuniperjunosMatch17.4r2-s1
ORjuniperjunosMatch17.4r2-s3
ORjuniperjunosMatch17.4r2-s4
Node
juniperjunosMatch18.1-
ORjuniperjunosMatch18.1r2
ORjuniperjunosMatch18.1r2-s1
ORjuniperjunosMatch18.1r2-s2
ORjuniperjunosMatch18.1r2-s4
ORjuniperjunosMatch18.1r3
ORjuniperjunosMatch18.1r3-s2
ORjuniperjunosMatch18.1r3-s3
ORjuniperjunosMatch18.1r3-s4
Node
juniperjunosMatch18.2-
ORjuniperjunosMatch18.2r1-s5
ORjuniperjunosMatch18.2r2-s1
ORjuniperjunosMatch18.2r2-s2
ORjuniperjunosMatch18.2r2-s3
ORjuniperjunosMatch18.2r2-s4
Node
juniperjunosMatch18.3-
ORjuniperjunosMatch18.3r1
ORjuniperjunosMatch18.3r1-s1
ORjuniperjunosMatch18.3r1-s2
ORjuniperjunosMatch18.3r1-s3
ORjuniperjunosMatch18.3r2
Node
juniperjunosMatch18.4-
ORjuniperjunosMatch18.4r1
ORjuniperjunosMatch18.4r1-s2
Node
juniperjunosMatch19.1-
ORjuniperjunosMatch19.1r1
| CPE | Name | Operator | Version |
|---|---|---|---|
| juniper:junos | juniper junos | eq | 12.3 |
CNA Affected
[
{
"platforms": [
"EX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "12.3R12-S15",
"status": "affected",
"version": "12.3",
"versionType": "custom"
}
]
},
{
"platforms": [
"SRX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "12.3X48-D85",
"status": "affected",
"version": "12.3X48",
"versionType": "custom"
},
{
"lessThan": "15.1X49-D180",
"status": "affected",
"version": "15.1X49",
"versionType": "custom"
}
]
},
{
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "14.1X53-D51",
"status": "affected",
"version": "14.1X53",
"versionType": "custom"
},
{
"lessThan": "15.1F6-S13, 15.1R7-S5",
"status": "affected",
"version": "15.1",
"versionType": "custom"
},
{
"lessThan": "15.1X53-D238",
"status": "affected",
"version": "15.1X53",
"versionType": "custom"
},
{
"lessThan": "16.1R4-S13, 16.1R7-S5",
"status": "affected",
"version": "16.1",
"versionType": "custom"
},
{
"lessThan": "16.2R2-S10",
"status": "affected",
"version": "16.2",
"versionType": "custom"
},
{
"lessThan": "17.1R3-S1",
"status": "affected",
"version": "17.1",
"versionType": "custom"
},
{
"lessThan": "17.2R2-S8, 17.2R3-S3",
"status": "affected",
"version": "17.2",
"versionType": "custom"
},
{
"lessThan": "17.3R3-S5",
"status": "affected",
"version": "17.3",
"versionType": "custom"
},
{
"lessThan": "17.4R2-S8, 17.4R3",
"status": "affected",
"version": "17.4",
"versionType": "custom"
},
{
"lessThan": "18.1R3-S8",
"status": "affected",
"version": "18.1",
"versionType": "custom"
},
{
"lessThan": "18.2R3",
"status": "affected",
"version": "18.2",
"versionType": "custom"
},
{
"lessThan": "18.3R3",
"status": "affected",
"version": "18.3",
"versionType": "custom"
},
{
"lessThan": "18.4R2",
"status": "affected",
"version": "18.4",
"versionType": "custom"
},
{
"lessThan": "19.1R1-S2, 19.1R2",
"status": "affected",
"version": "19.1",
"versionType": "custom"
}
]
}
]References
Related
nvd
nvd
CVE-2019-0062
2019-10-09 20:15:17
nessus
nessus
Junos OS: J-Web Session Fixation Vulnerability (JSA10961)
2019-11-06 00:00:00
Juniper JSA10970
2020-01-29 00:00:00
prion
prion
Session fixation
2019-10-09 20:15:00
symantec
symantec
Juniper Junos CVE-2019-0062 Session Fixation Vulnerability
2019-10-09 00:00:00
cvelist
cvelist
CVE-2019-0062 Junos OS: Session fixation vulnerability in J-Web
2019-10-09 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.8%
Related for CVE-2019-0062