Medium · 5.5 CVE-2020-1621 EUVD-2020-12489GHSA-cwf2-c942-3pqv

Junos OS Evolved: Configd leaks hashes via stream and is world readable

Published Apr 8, 2020 · Updated Sep 17, 2024 · Assigned by juniper

Vendor: Juniper Networks Product: Junos OS Evolved Category: Network devices

Description

A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1.

Affected products

Vendor	Product	Affected	Fixed
Juniper Networks	Junos OS Evolved	unspecified – < 19.3R1-EVO	19.3R1-EVO

References

https://kb.juniper.net/JSA11003