THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE
PUBLISHED

CVE-2024-39532

Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user

Assignerjuniper
Reserved2024-06-25
Published2024-07-11
Updated2024-07-11

Description

An Insertion of Sensitive Information into Log File vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to access sensitive information. When another user performs a specific operation, sensitive information is stored as plain text in a specific log file, so that a high-privileged attacker has access to this information. This issue affects: Junos OS: * All versions before 22.1R2-S2, * 22.1R3 and later versions, * 22.2 versions before 22.2R2-S1, 22.2R3, * 22.3 versions before 22.3R1-S2, 22.3R2; Junos OS Evolved: * All versions before before 22.1R3-EVO, * 22.2-EVO versions before 22.2R2-S1-EVO, 22.2R3-EVO, * 22.3-EVO versions before 22.3R1-S1-EVO, 22.3R2-EVO.



MEDIUM: 6.3CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
MEDIUM: 4.2CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N

Problem types

CWE-532 Insertion of Sensitive Information into Log File

Product status

Default status
unaffected

Any version before 22.1R2-S2
affected

22.1R3 before 22.1R3-S5
affected

22.2 before 22.2R2-S1, 22.2R3
affected

22.3 before 22.3R1-S2, 22.3R2
affected

Default status
unaffected

Any version before 22.1R3-EVO
affected

22.2-EVO before 22.2R2-S1-EVO, 22.2R3-EVO
affected

22.3-EVO before 22.3R1-S1-EVO, 22.3R2-EVO
affected

References

https://supportportal.juniper.net/JSA82992 vendor-advisory

cve.org CVE-2024-39532

nvd.nist.gov CVE-2024-39532

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-39532
© Copyright 2024 THREATINT. Made in Cyprus with +