Weakness (CWE)
CWE-446: UI Discrepancy for Security Feature
Class Incomplete
The user interface does not correctly enable or configure a security feature, but the interface provides feedback that causes the user to believe that the feature is in a secure state.
Source: MITRE CWE-446
1 result · Clear filters · Feed
-
High 7.2
Junos OS: After removing ssh public key authentication root can still log in
A UI Discrepancy for Security Feature vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a network-based, unauthenticated attacker to access the device. On VM Host Routing Engines (RE), even if the configured public key for root ha…