CVE-2019-0032
High
Description
A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper Networks Service Insight versions from 15.1R1, prior to 18.1R1. Service Now versions from 15.1R1, prior to 18.1R1.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Juniper Service Insight
PublishedApr 10, 2019
First seenApr 10, 2019
Weakness typeCWE-256CWE-256
How to fix
Update
- juniper service_insight18.1r1 or later
- juniper service_now18.1r1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper service_insight | 15.1r1 ≤ v < 18.1r1 | 18.1r1 |
| juniper service_now | 15.1r1 ≤ v < 18.1r1 | 18.1r1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.