{"affected":[{"affectedData":[{"platforms":["NFX350"],"product":"Junos OS","vendor":"Juniper Networks","versions":[{"lessThan":"19.4R3","status":"affected","version":"19.4","versionType":"custom"},{"lessThan":"20.1R1-S4, 20.1R2","status":"affected","version":"20.1","versionType":"custom"}]}],"source":"sirt@juniper.net"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*","matchCriteriaId":"DC743EE4-8833-452A-94DB-655BF139F883","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*","matchCriteriaId":"FE96A8EA-FFE3-4D8F-9266-21899149D634","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*","matchCriteriaId":"C12A75C6-2D00-4202-B861-00FF71585FA0","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*","matchCriteriaId":"4DCFA774-96EF-4018-82CF-95C807025C24","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*","matchCriteriaId":"8328FDE6-9707-4142-B905-3B07C0E28E35","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*","matchCriteriaId":"41CD982F-E6F2-4951-9F96-A76C142DF08E","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*","matchCriteriaId":"19FDC05F-5582-4F7E-B628-E58A3C0E7F2F","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*","matchCriteriaId":"401306D1-E9CE-49C6-8DC9-0E8747B9DC2C","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:juniper:nfx350:-:*:*:*:*:*:*:*","matchCriteriaId":"6CB56048-A486-4A46-B438-CC3084BD9CB6","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Juniper Device Manager (JDM) container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes in the world-readable file /etc/passwd. This is not a security best current practice as it can allow an attacker with access to the local filesystem the ability to brute-force decrypt password hashes stored on the system. This issue affects Juniper Networks Junos OS on NFX350: 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2."},{"lang":"es","value":"El contenedor Juniper Device Manager (JDM), utilizado por la arquitectura de Junos OS desagregado en los dispositivos Juniper Networks NFX350 Series, almacena hashes de contraseña en el archivo /etc/passwd de tipo world-readable. Esta no es una de las mejores prácticas de seguridad actuales, ya que puede permitir a un atacante con acceso al sistema de archivos local la capacidad de descifrar por fuerza bruta los hashes de contraseña almacenados en el sistema. Este problema afecta a Juniper Networks Junos OS en NFX350: versiones 19.4 anteriores a 19.4R3; versiones 20.1 anteriores a 20.1R1-S4, 20.1R2"}],"id":"CVE-2020-1669","lastModified":"2026-06-17T03:02:09.813","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":1.0,"impactScore":5.2,"source":"sirt@juniper.net","type":"Secondary"}]},"published":"2020-10-16T21:15:12.880","references":[{"source":"sirt@juniper.net","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA11066"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA11066"}],"sourceIdentifier":"sirt@juniper.net","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-256"}],"source":"sirt@juniper.net","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-522"}],"source":"nvd@nist.gov","type":"Primary"}]}