Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.
References
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2013-05-08 16:55
Updated : 2017-08-28 18:33
NVD link : CVE-2013-3497
Mitre link : CVE-2013-3497
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
juniper
- junos_space_ja1500_appliance
- junos_space_virtual_appliance
- junos_space