Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-0032 EUVD-2019-0839GHSA-vxwr-95xc-xxrg

Junos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.

Published Apr 10, 2019 · Updated Sep 16, 2024 · Assigned by juniper

Description

A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper Networks Service Insight versions from 15.1R1, prior to 18.1R1. Service Now versions from 15.1R1, prior to 18.1R1.

Affected products

VendorProductAffectedFixed
Juniper Networks Service Insight 15.1R1 – < unspecified, unspecified – < 18.1R1 unspecified
Juniper Networks Service Now 15.1R1 – < unspecified, unspecified – < 18.1R1 unspecified

References