{"affected":[{"affectedData":[{"product":"Junos Space","vendor":"Juniper Networks","versions":[{"lessThan":"18.3R1","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"sirt@juniper.net"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:juniper:junos_space:13.3:r1:*:*:*:*:*:*","matchCriteriaId":"7B610137-66AC-43D3-BBAE-4390011C20AC","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:13.3:r2:*:*:*:*:*:*","matchCriteriaId":"D81E5484-5C0D-44CB-90A8-65EE4E7D4F92","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:13.3:r3:*:*:*:*:*:*","matchCriteriaId":"5EDD9296-6FB1-45E2-80EE-9F0F84CAFC94","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:13.3:r4:*:*:*:*:*:*","matchCriteriaId":"A53A9542-72FD-40E8-94F1-C7C0D776D726","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:14.1:-:*:*:*:*:*:*","matchCriteriaId":"DC29AA1D-4CBC-413A-9333-72F3616CE918","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:14.1:r1:*:*:*:*:*:*","matchCriteriaId":"00FCCF10-B612-46FC-94E6-70082F2E1091","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:14.1:r2:*:*:*:*:*:*","matchCriteriaId":"E5F85CA0-36F3-48EE-8D35-A986412C91D9","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:14.1:r3:*:*:*:*:*:*","matchCriteriaId":"61813043-BAED-4803-9D5B-7B7E113D2FBD","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.1:r1:*:*:*:*:*:*","matchCriteriaId":"7A3698B1-CC10-40D0-872C-417263C7A949","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.1:r2:*:*:*:*:*:*","matchCriteriaId":"B5A79F3A-80B9-4D98-92EE-681ED2E716B8","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.1:r3:*:*:*:*:*:*","matchCriteriaId":"FD833CE8-F37B-4EEB-9DD3-E8A8BB121390","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.1:r4:*:*:*:*:*:*","matchCriteriaId":"3E4B00D0-93F9-4145-BA91-6F4A66F19854","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.2:-:*:*:*:*:*:*","matchCriteriaId":"74CB3FCB-192A-48A7-9FF3-3D228729AC60","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.2:r1:*:*:*:*:*:*","matchCriteriaId":"B1107BD8-2F96-4788-A478-C0D7B9D22688","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.2:r2:*:*:*:*:*:*","matchCriteriaId":"139FA36E-582D-41E9-AC4F-9BD49C844039","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:16.1:-:*:*:*:*:*:*","matchCriteriaId":"2EB54773-A54F-4D9E-B213-464421B4FA88","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:16.1:r1:*:*:*:*:*:*","matchCriteriaId":"FC8CBF0A-310F-41EB-B377-F08FE03E3867","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:16.1:r2:*:*:*:*:*:*","matchCriteriaId":"62BB74B8-C90B-4CA1-B8CE-29F8D42D4B46","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:16.1:r3:*:*:*:*:*:*","matchCriteriaId":"44855E13-5493-4362-B7E8-5A1A6F299FFC","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:17.1:r1:*:*:*:*:*:*","matchCriteriaId":"430F2EBF-09EB-4F48-ACF8-8B4EDF83E284","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:17.2:r1.4:*:*:*:*:*:*","matchCriteriaId":"BE35151C-FCF6-4A89-8283-B24225019241","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:18.1:r1:*:*:*:*:*:*","matchCriteriaId":"7398A446-3A15-40C5-A76A-042D6FA9221C","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:18.2:r1:*:*:*:*:*:*","matchCriteriaId":"D4337421-61DB-4469-868E-E8A04BE01B46","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1."},{"lang":"es","value":"La aplicación de Junos Space, que permite que los archivos Device Image se suban, tiene una comprobación de validez insuficiente, lo que podría permitir la subida de imágenes o scripts, así como otros tipos de contenido. Las distribuciones afectadas son: Junos Space en todas sus versiones anteriores a la 18.3R1."}],"id":"CVE-2019-0017","lastModified":"2026-06-17T02:07:31.233","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":6.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"sirt@juniper.net","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-01-15T21:29:01.493","references":[{"source":"sirt@juniper.net","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA10917"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA10917"}],"sourceIdentifier":"sirt@juniper.net","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-434"}],"source":"nvd@nist.gov","type":"Primary"}]}