Juniper: >> Junos Space >> 18.2 Security Vulnerabilities
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
CVSS Score
6.5
EPSS Score
0.009
Published
2019-01-15
The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
CVSS Score
6.5
EPSS Score
0.011
Published
2019-01-15
Page 4