Description
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804.
References
- 61794 vdb-entry
- http://kb.juniper.net/JSA10585
- 1028923 vdb-entry