NetSight
medium4.0

CVE-2013-5096

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows…

Impact

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804.

Affected products

VendorProductAffected versions
JuniperJunos Space
Versions 11.1, 11.2, 11.3, 11.4, 12.1, 12.2
JuniperJunos Space Virtual Appliance
All versions
JuniperJunos Space Ja1500 Appliance
All versions

Weakness classification

References