CVEvulnerability
CVE-2013-5096
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804.
Affected configurations
• juniper junos space 11.1
• juniper junos space 11.2
• juniper junos space 11.3
• juniper junos space 11.4
• juniper junos space 12.1
• juniper junos space 12.2
• juniper junos space 12.3
• juniper junos space virtual appliance
• juniper junos space ja1500 appliance
Related
Weakness · not in database (1)
References
- http://kb.juniper.net/JSA10585 Vendor Advisory
- http://www.securityfocus.com/bid/61794 www.securityfocus.com
- http://www.securitytracker.com/id/1028923 www.securitytracker.com
- http://kb.juniper.net/JSA10585 Vendor Advisory
- http://www.securityfocus.com/bid/61794 www.securityfocus.com
- http://www.securitytracker.com/id/1028923 www.securitytracker.com