var-201310-0461
Vulnerability from variot
J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts. Juniper Junos is prone to a cross-site request-forgery vulnerability. Attackers can exploit this issue to perform certain administrative actions and gain unauthorized access to the affected device. Juniper Junos 10.4, 11.4, 12.1, 12.1X44, 12.2, 12.3, and 13.1 are vulnerable. Juniper Networks Junos is a set of network operating system of Juniper Networks (Juniper Networks) dedicated to the company's hardware system. The operating system provides a secure programming interface and Junos SDK. J-Web is a network management tool for routers or switches using Junos. The following releases are affected: Junos 10.4, 11.4, 12.1, 12.1X44, 12.2, 12.3, 13.1
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201310-0461", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "junos", "scope": "eq", "trust": 1.6, "vendor": "juniper", "version": "9.4" }, { "model": "junos", "scope": "eq", "trust": 1.6, "vendor": "juniper", "version": "9.0" }, { "model": "junos", "scope": "eq", "trust": 1.6, "vendor": "juniper", "version": "8.2" }, { "model": "junos", "scope": "eq", "trust": 1.6, "vendor": "juniper", "version": "8.3" }, { "model": "junos", "scope": "eq", "trust": 1.6, "vendor": "juniper", "version": "9.1" }, { "model": "junos", "scope": "eq", "trust": 1.6, "vendor": "juniper", "version": "9.5" }, { "model": "junos", "scope": "eq", "trust": 1.6, "vendor": "juniper", "version": "9.2" }, { "model": "junos", "scope": "eq", "trust": 1.6, "vendor": "juniper", "version": "8.4" }, { "model": "junos", "scope": "eq", "trust": 1.6, "vendor": "juniper", "version": "9.6" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "4.1" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "6.4" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "12.1x44" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "4.0" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "13.1" }, { "model": "junos", "scope": "lte", "trust": 1.0, "vendor": "juniper", "version": "10.4" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "4.2" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "5.3" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "6.3" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "12.1x45" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "5.2" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "5.0" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "7.2" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "8.1" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "5.7" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "12.2" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "7.3" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "8.0" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "4.3" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "5.5" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "5.6" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "6.1" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "5.4" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "4.4" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "6.2" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "12.3" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "6.0" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "7.4" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "7.6" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "11.4" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "7.5" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "7.0" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "12.1" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "5.1" }, { "model": "junos", "scope": "eq", "trust": 1.0, "vendor": "juniper", "version": "7.1" }, { "model": "junos os", "scope": "lt", "trust": 0.8, "vendor": "juniper", "version": "13.1" }, { "model": "junos os", "scope": "lt", "trust": 0.8, "vendor": "juniper", "version": "12.1r" }, { "model": "junos os", "scope": "lt", "trust": 0.8, "vendor": "juniper", "version": "12.1x45" }, { "model": "junos os", "scope": "lt", "trust": 0.8, "vendor": "juniper", "version": "12.3" }, { "model": "junos os", "scope": "eq", "trust": 0.8, "vendor": "juniper", "version": "12.1r6" }, { "model": "junos os", "scope": "eq", "trust": 0.8, "vendor": "juniper", "version": "12.1x45-d10" }, { "model": "junos os", "scope": "eq", "trust": 0.8, "vendor": "juniper", "version": "12.3r2" }, { "model": "junos os", "scope": "lt", "trust": 0.8, "vendor": "juniper", "version": "12.1x44" }, { "model": "junos os", "scope": "eq", "trust": 0.8, "vendor": "juniper", "version": "12.1x44-d15" }, { "model": "junos os", "scope": "lt", "trust": 0.8, "vendor": "juniper", "version": "12.2" }, { "model": "junos os", "scope": "eq", "trust": 0.8, "vendor": "juniper", "version": "11.4r7" }, { "model": "junos os", "scope": "eq", "trust": 0.8, "vendor": "juniper", "version": "12.2r3" }, { "model": "junos os", "scope": "eq", "trust": 0.8, "vendor": "juniper", "version": "13.1r3" }, { "model": "junos os", "scope": "lt", "trust": 0.8, "vendor": "juniper", "version": "11.4" }, { "model": "junos", "scope": "eq", "trust": 0.6, "vendor": "juniper", "version": "10.4" }, { "model": "networks junos", "scope": "eq", "trust": 0.3, "vendor": "juniper", "version": "10.4" } ], "sources": [ { "db": "BID", "id": "62940" }, { "db": "JVNDB", "id": "JVNDB-2013-004804" }, { "db": "CNNVD", "id": "CNNVD-201310-461" }, { "db": "NVD", "id": "CVE-2013-4689" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/o:juniper:junos", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2013-004804" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "The vendor reported this issue.", "sources": [ { "db": "BID", "id": "62940" } ], "trust": 0.3 }, "cve": "CVE-2013-4689", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 4.9, "id": "CVE-2013-4689", "impactScore": 6.4, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 1.8, "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 4.9, "id": "VHN-64691", "impactScore": 6.4, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:N/AC:H/AU:N/C:P/I:P/A:P", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2013-4689", "trust": 1.0, "value": "MEDIUM" }, { "author": "NVD", "id": "CVE-2013-4689", "trust": 0.8, "value": "Medium" }, { "author": "CNNVD", "id": "CNNVD-201310-461", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-64691", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-64691" }, { "db": "JVNDB", "id": "JVNDB-2013-004804" }, { "db": "CNNVD", "id": "CNNVD-201310-461" }, { "db": "NVD", "id": "CVE-2013-4689" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts. Juniper Junos is prone to a cross-site request-forgery vulnerability. \nAttackers can exploit this issue to perform certain administrative actions and gain unauthorized access to the affected device. \nJuniper Junos 10.4, 11.4, 12.1, 12.1X44, 12.2, 12.3, and 13.1 are vulnerable. Juniper Networks Junos is a set of network operating system of Juniper Networks (Juniper Networks) dedicated to the company\u0027s hardware system. The operating system provides a secure programming interface and Junos SDK. J-Web is a network management tool for routers or switches using Junos. The following releases are affected: Junos 10.4, 11.4, 12.1, 12.1X44, 12.2, 12.3, 13.1", "sources": [ { "db": "NVD", "id": "CVE-2013-4689" }, { "db": "JVNDB", "id": "JVNDB-2013-004804" }, { "db": "BID", "id": "62940" }, { "db": "VULHUB", "id": "VHN-64691" } ], "trust": 1.98 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2013-4689", "trust": 2.8 }, { "db": "BID", "id": "62940", "trust": 2.0 }, { "db": "SECUNIA", "id": "55166", "trust": 1.7 }, { "db": "JUNIPER", "id": "JSA10597", "trust": 1.7 }, { "db": "OSVDB", "id": "98325", "trust": 1.7 }, { "db": "JVNDB", "id": "JVNDB-2013-004804", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201310-461", "trust": 0.7 }, { "db": "VULHUB", "id": "VHN-64691", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-64691" }, { "db": "BID", "id": "62940" }, { "db": "JVNDB", "id": "JVNDB-2013-004804" }, { "db": "CNNVD", "id": "CNNVD-201310-461" }, { "db": "NVD", "id": "CVE-2013-4689" } ] }, "id": "VAR-201310-0461", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-64691" } ], "trust": 0.40555555 }, "last_update_date": "2024-11-23T22:31:22.265000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "JSA10597", "trust": 0.8, "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10597" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2013-004804" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-352", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-64691" }, { "db": "JVNDB", "id": "JVNDB-2013-004804" }, { "db": "NVD", "id": "CVE-2013-4689" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.7, "url": "http://www.securityfocus.com/bid/62940" }, { "trust": 1.7, "url": "http://osvdb.org/98325" }, { "trust": 1.7, "url": "http://secunia.com/advisories/55166" }, { "trust": 1.6, "url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10597" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-4689" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-4689" }, { "trust": 0.3, "url": "http://www.juniper.net/" }, { "trust": 0.1, "url": "http://kb.juniper.net/infocenter/index?page=content\u0026amp;id=jsa10597" } ], "sources": [ { "db": "VULHUB", "id": "VHN-64691" }, { "db": "BID", "id": "62940" }, { "db": "JVNDB", "id": "JVNDB-2013-004804" }, { "db": "CNNVD", "id": "CNNVD-201310-461" }, { "db": "NVD", "id": "CVE-2013-4689" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULHUB", "id": "VHN-64691" }, { "db": "BID", "id": "62940" }, { "db": "JVNDB", "id": "JVNDB-2013-004804" }, { "db": "CNNVD", "id": "CNNVD-201310-461" }, { "db": "NVD", "id": "CVE-2013-4689" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2013-10-17T00:00:00", "db": "VULHUB", "id": "VHN-64691" }, { "date": "2013-10-10T00:00:00", "db": "BID", "id": "62940" }, { "date": "2013-10-22T00:00:00", "db": "JVNDB", "id": "JVNDB-2013-004804" }, { "date": "2013-10-21T00:00:00", "db": "CNNVD", "id": "CNNVD-201310-461" }, { "date": "2013-10-17T23:55:04.627000", "db": "NVD", "id": "CVE-2013-4689" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2013-10-25T00:00:00", "db": "VULHUB", "id": "VHN-64691" }, { "date": "2013-10-10T00:00:00", "db": "BID", "id": "62940" }, { "date": "2013-10-28T00:00:00", "db": "JVNDB", "id": "JVNDB-2013-004804" }, { "date": "2013-11-01T00:00:00", "db": "CNNVD", "id": "CNNVD-201310-461" }, { "date": "2024-11-21T01:56:04.280000", "db": "NVD", "id": "CVE-2013-4689" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201310-461" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Juniper Junos of J-Web Vulnerable to bypass cross-site request forgery protection mechanism", "sources": [ { "db": "JVNDB", "id": "JVNDB-2013-004804" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "cross-site request forgery", "sources": [ { "db": "CNNVD", "id": "CNNVD-201310-461" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.