Medium · 5.5 CVE-2020-1620 EUVD-2020-12488GHSA-36rr-mv68-7vvr

Junos OS Evolved: Configd leaks hashes via log file and is world readable

Published Apr 8, 2020 · Updated Sep 17, 2024 · Assigned by juniper

Vendor: Juniper Networks Product: Junos OS Evolved Category: Network devices

Description

A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1.

Affected products

Vendor	Product	Affected	Fixed
Juniper Networks	Junos OS Evolved	unspecified – < 19.3R1-EVO	19.3R1-EVO

References

https://kb.juniper.net/JSA11003