CVEvulnerability
CVE-2013-3497
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-05-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-255
Description
Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.
Affected configurations
• juniper junos space (<= 12.3)
• juniper junos space 1.0
• juniper junos space 1.1
• juniper junos space 1.2
• juniper junos space 1.3
• juniper junos space 1.4
• juniper junos space 2.0
• juniper junos space 11.1
• juniper junos space 11.2
• juniper junos space 11.3
• juniper junos space 11.4
• juniper junos space 12.1
• juniper junos space 12.2
• juniper junos space virtual appliance
• juniper junos space ja1500 appliance
Related
Weakness · not in database (1)
References
- http://osvdb.org/93112 osvdb.org
- http://www.securityfocus.com/bid/59760 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84109 exchange.xforce.ibmcloud.com
- https://kb.juniper.net/KB27374 Vendor Advisory
- http://osvdb.org/93112 osvdb.org
- http://www.securityfocus.com/bid/59760 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84109 exchange.xforce.ibmcloud.com
- https://kb.juniper.net/KB27374 Vendor Advisory