2 lines
5.9 KiB
JSON
2 lines
5.9 KiB
JSON
{"affected":[{"affectedData":[{"product":"Junos Space","vendor":"Juniper Networks","versions":[{"lessThan":"18.3R1","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"sirt@juniper.net"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:juniper:junos_space:13.3:r1:*:*:*:*:*:*","matchCriteriaId":"7B610137-66AC-43D3-BBAE-4390011C20AC","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:13.3:r2:*:*:*:*:*:*","matchCriteriaId":"D81E5484-5C0D-44CB-90A8-65EE4E7D4F92","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:13.3:r3:*:*:*:*:*:*","matchCriteriaId":"5EDD9296-6FB1-45E2-80EE-9F0F84CAFC94","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:13.3:r4:*:*:*:*:*:*","matchCriteriaId":"A53A9542-72FD-40E8-94F1-C7C0D776D726","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:14.1:-:*:*:*:*:*:*","matchCriteriaId":"DC29AA1D-4CBC-413A-9333-72F3616CE918","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:14.1:r1:*:*:*:*:*:*","matchCriteriaId":"00FCCF10-B612-46FC-94E6-70082F2E1091","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:14.1:r2:*:*:*:*:*:*","matchCriteriaId":"E5F85CA0-36F3-48EE-8D35-A986412C91D9","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:14.1:r3:*:*:*:*:*:*","matchCriteriaId":"61813043-BAED-4803-9D5B-7B7E113D2FBD","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.1:r1:*:*:*:*:*:*","matchCriteriaId":"7A3698B1-CC10-40D0-872C-417263C7A949","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.1:r2:*:*:*:*:*:*","matchCriteriaId":"B5A79F3A-80B9-4D98-92EE-681ED2E716B8","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.1:r3:*:*:*:*:*:*","matchCriteriaId":"FD833CE8-F37B-4EEB-9DD3-E8A8BB121390","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.1:r4:*:*:*:*:*:*","matchCriteriaId":"3E4B00D0-93F9-4145-BA91-6F4A66F19854","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.2:-:*:*:*:*:*:*","matchCriteriaId":"74CB3FCB-192A-48A7-9FF3-3D228729AC60","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.2:r1:*:*:*:*:*:*","matchCriteriaId":"B1107BD8-2F96-4788-A478-C0D7B9D22688","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.2:r2:*:*:*:*:*:*","matchCriteriaId":"139FA36E-582D-41E9-AC4F-9BD49C844039","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:16.1:-:*:*:*:*:*:*","matchCriteriaId":"2EB54773-A54F-4D9E-B213-464421B4FA88","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:16.1:r1:*:*:*:*:*:*","matchCriteriaId":"FC8CBF0A-310F-41EB-B377-F08FE03E3867","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:16.1:r2:*:*:*:*:*:*","matchCriteriaId":"62BB74B8-C90B-4CA1-B8CE-29F8D42D4B46","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:16.1:r3:*:*:*:*:*:*","matchCriteriaId":"44855E13-5493-4362-B7E8-5A1A6F299FFC","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:17.1:r1:*:*:*:*:*:*","matchCriteriaId":"430F2EBF-09EB-4F48-ACF8-8B4EDF83E284","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:17.2:r1.4:*:*:*:*:*:*","matchCriteriaId":"BE35151C-FCF6-4A89-8283-B24225019241","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:18.1:r1:*:*:*:*:*:*","matchCriteriaId":"7398A446-3A15-40C5-A76A-042D6FA9221C","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:18.2:r1:*:*:*:*:*:*","matchCriteriaId":"D4337421-61DB-4469-868E-E8A04BE01B46","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1."},{"lang":"es","value":"La aplicación de Junos Space, que permite que los archivos Device Image se suban, tiene una comprobación de validez insuficiente, lo que podría permitir la subida de imágenes o scripts, así como otros tipos de contenido. Las distribuciones afectadas son: Junos Space en todas sus versiones anteriores a la 18.3R1."}],"id":"CVE-2019-0017","lastModified":"2026-06-17T02:07:31.233","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":6.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"sirt@juniper.net","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-01-15T21:29:01.493","references":[{"source":"sirt@juniper.net","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA10917"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA10917"}],"sourceIdentifier":"sirt@juniper.net","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-434"}],"source":"nvd@nist.gov","type":"Primary"}]}
|