1. CVE-Search
  2. CVE-2013-3497
ID CVE-2013-3497
Summary Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.
References
Vulnerable Configurations
  • cpe:2.3:a:juniper:junos_space:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:1.3:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:1.4:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:11.1:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:11.1:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:11.2:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:11.2:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:11.3:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:11.3:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:11.4:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:11.4:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:12.1:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:12.1:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:12.2:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:12.2:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space:12.3:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space:12.3:*:*:*:*:*:*:*
  • cpe:2.3:a:juniper:junos_space_virtual_appliance:-:*:*:*:*:*:*:*
    cpe:2.3:a:juniper:junos_space_virtual_appliance:-:*:*:*:*:*:*:*
  • cpe:2.3:h:juniper:junos_space_ja1500_appliance:-:*:*:*:*:*:*:*
    cpe:2.3:h:juniper:junos_space_ja1500_appliance:-:*:*:*:*:*:*:*
CVSS
Base: 4.7 (as of 29-08-2017 - 01:33)
Impact:
Exploitability:
CWE CWE-255
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE NONE NONE
cvss-vector via4 AV:L/AC:M/Au:N/C:C/I:N/A:N
refmap via4
bid 59760
confirm https://kb.juniper.net/KB27374
osvdb 93112
xf juniper-cve20133497-info-disc(84109)
Last major update 29-08-2017 - 01:33
Published 08-05-2013 - 23:55
Last modified 29-08-2017 - 01:33
Back to Top