2 lines
4.5 KiB
JSON
2 lines
4.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"Service Insight","vendor":"Juniper Networks","versions":[{"lessThan":"unspecified","status":"affected","version":"15.1R1","versionType":"custom"},{"lessThan":"18.1R1","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Service Now","vendor":"Juniper Networks","versions":[{"lessThan":"unspecified","status":"affected","version":"15.1R1","versionType":"custom"},{"lessThan":"18.1R1","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"sirt@juniper.net"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:juniper:service_insight:*:*:*:*:*:*:*:*","matchCriteriaId":"2B32205F-8987-4A72-88F4-B4668E39434E","versionEndExcluding":"18.1r1","versionStartIncluding":"15.1r1","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:service_now:*:*:*:*:*:*:*:*","matchCriteriaId":"A121FE92-445A-408E-B1F3-046AEF0AD5AD","versionEndExcluding":"18.1r1","versionStartIncluding":"15.1r1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper Networks Service Insight versions from 15.1R1, prior to 18.1R1. Service Now versions from 15.1R1, prior to 18.1R1."},{"lang":"es","value":"Se presenta un problema de administración de contraseña donde el nombre de usuario y la contraseña de autenticación de la Organización fueron almacenadas en texto plano en los archivos de registro. Un atacante autenticado localmente que es capaz de acceder a estas credenciales almacenadas de texto plano puede usarlas para iniciar sesión en la Organización. Los productos afectados son: Juniper Networks Service Insight versiones desde 15.1R1, anterior a 18.1R1. Service Now versiones desde 15.1R1, anterior a 18.1R1."}],"id":"CVE-2019-0032","lastModified":"2026-06-17T02:07:33.297","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":2.0,"impactScore":4.0,"source":"sirt@juniper.net","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-04-10T20:29:00.537","references":[{"source":"sirt@juniper.net","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/107885"},{"source":"sirt@juniper.net","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA10921"},{"source":"sirt@juniper.net","tags":["Release Notes","Vendor Advisory"],"url":"https://kb.juniper.net/KB27572"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/107885"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA10921"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"],"url":"https://kb.juniper.net/KB27572"}],"sourceIdentifier":"sirt@juniper.net","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-256"}],"source":"sirt@juniper.net","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-522"},{"lang":"en","value":"CWE-532"}],"source":"nvd@nist.gov","type":"Primary"}]}
|