Skip to content
OpenAdvisories

Product · Juniper Networks

Juniper ATP

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.8
    CVE-2019-0004

    Juniper ATP: API and device keys are logged in a world-readable permissions file

    On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI interface. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

    Juniper Networks Juniper ATP Network devices
  • High 8.8
    CVE-2019-0029

    Juniper ATP: Splunk credentials are in logged in clear text

    Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

    Juniper Networks Juniper ATP Network devices
  • High 7.1
    CVE-2019-0021

    Juniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text

    On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to view these secret information. This issue affects Juniper ATP 5.0 versions prior to 5.0.4.

    Juniper Networks Juniper ATP Network devices