CVE Vulnerabilities

CVE-2016-1264

Published: Apr 15, 2016 | Modified: Dec 03, 2016
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Race condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 12.3X50 before 12.3X50-D50, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.2X52 before 13.2X52-D30, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D30, 14.2 before 14.2R4, 15.1 before 15.1F2 or 15.1R2, 15.1X49 before 15.1X49-D10 or 15.1X49-D20, and 16.1 before 16.1R1 allows remote authenticated users to gain privileges via the URL option.

Affected Software

Name Vendor Start Version End Version
Junos Juniper * 12.1x44 (including)
Junos Juniper 12.1x46 (including) 12.1x46 (including)
Junos Juniper 12.1x46-d10 (including) 12.1x46-d10 (including)
Junos Juniper 12.1x46-d15 (including) 12.1x46-d15 (including)
Junos Juniper 12.1x46-d20 (including) 12.1x46-d20 (including)
Junos Juniper 12.1x46-d25 (including) 12.1x46-d25 (including)
Junos Juniper 12.1x46-d30 (including) 12.1x46-d30 (including)
Junos Juniper 12.1x46-d35 (including) 12.1x46-d35 (including)
Junos Juniper 12.1x47 (including) 12.1x47 (including)
Junos Juniper 12.1x47-d10 (including) 12.1x47-d10 (including)
Junos Juniper 12.1x47-d15 (including) 12.1x47-d15 (including)
Junos Juniper 12.1x47-d20 (including) 12.1x47-d20 (including)
Junos Juniper 12.3 (including) 12.3 (including)
Junos Juniper 12.3-r1 (including) 12.3-r1 (including)
Junos Juniper 12.3-r10 (including) 12.3-r10 (including)
Junos Juniper 12.3-r2 (including) 12.3-r2 (including)
Junos Juniper 12.3-r3 (including) 12.3-r3 (including)
Junos Juniper 12.3-r4 (including) 12.3-r4 (including)
Junos Juniper 12.3-r5 (including) 12.3-r5 (including)
Junos Juniper 12.3-r6 (including) 12.3-r6 (including)
Junos Juniper 12.3-r7 (including) 12.3-r7 (including)
Junos Juniper 12.3-r8 (including) 12.3-r8 (including)
Junos Juniper 12.3-r9 (including) 12.3-r9 (including)
Junos Juniper 12.3x48-d10 (including) 12.3x48-d10 (including)
Junos Juniper 12.3x48-d15 (including) 12.3x48-d15 (including)
Junos Juniper 12.3x50 (including) 12.3x50 (including)
Junos Juniper 12.3x50-d20 (including) 12.3x50-d20 (including)
Junos Juniper 12.3x50-d30 (including) 12.3x50-d30 (including)
Junos Juniper 12.3x50-d35 (including) 12.3x50-d35 (including)
Junos Juniper 12.3x50-d40 (including) 12.3x50-d40 (including)
Junos Juniper 12.3x50-d45 (including) 12.3x50-d45 (including)
Junos Juniper 13.2 (including) 13.2 (including)
Junos Juniper 13.2-r1 (including) 13.2-r1 (including)
Junos Juniper 13.2-r2 (including) 13.2-r2 (including)
Junos Juniper 13.2-r3 (including) 13.2-r3 (including)
Junos Juniper 13.2-r4 (including) 13.2-r4 (including)
Junos Juniper 13.2-r5 (including) 13.2-r5 (including)
Junos Juniper 13.2-r6 (including) 13.2-r6 (including)
Junos Juniper 13.2-r7 (including) 13.2-r7 (including)
Junos Juniper 13.2-r7-s1 (including) 13.2-r7-s1 (including)
Junos Juniper 13.2-r7-s2 (including) 13.2-r7-s2 (including)
Junos Juniper 13.2x51-d15 (including) 13.2x51-d15 (including)
Junos Juniper 13.2x51-d20 (including) 13.2x51-d20 (including)
Junos Juniper 13.2x51-d21 (including) 13.2x51-d21 (including)
Junos Juniper 13.2x51-d25 (including) 13.2x51-d25 (including)
Junos Juniper 13.2x51-d26 (including) 13.2x51-d26 (including)
Junos Juniper 13.2x51-d30 (including) 13.2x51-d30 (including)
Junos Juniper 13.2x51-d35 (including) 13.2x51-d35 (including)
Junos Juniper 13.2x52-d10 (including) 13.2x52-d10 (including)
Junos Juniper 13.2x52-d15 (including) 13.2x52-d15 (including)
Junos Juniper 13.2x52-d20 (including) 13.2x52-d20 (including)
Junos Juniper 13.2x52-d25 (including) 13.2x52-d25 (including)
Junos Juniper 13.2x52-d5 (including) 13.2x52-d5 (including)
Junos Juniper 13.3 (including) 13.3 (including)
Junos Juniper 13.3-r1 (including) 13.3-r1 (including)
Junos Juniper 13.3-r2 (including) 13.3-r2 (including)
Junos Juniper 13.3-r2-s2 (including) 13.3-r2-s2 (including)
Junos Juniper 13.3-r3 (including) 13.3-r3 (including)
Junos Juniper 13.3-r4 (including) 13.3-r4 (including)
Junos Juniper 13.3-r5 (including) 13.3-r5 (including)
Junos Juniper 13.3-r6 (including) 13.3-r6 (including)
Junos Juniper 14.1 (including) 14.1 (including)
Junos Juniper 14.1-r1 (including) 14.1-r1 (including)
Junos Juniper 14.1-r2 (including) 14.1-r2 (including)
Junos Juniper 14.1-r3 (including) 14.1-r3 (including)
Junos Juniper 14.1-r4 (including) 14.1-r4 (including)
Junos Juniper 14.1-r5 (including) 14.1-r5 (including)
Junos Juniper 14.1x53 (including) 14.1x53 (including)
Junos Juniper 14.1x53-d10 (including) 14.1x53-d10 (including)
Junos Juniper 14.1x53-d15 (including) 14.1x53-d15 (including)
Junos Juniper 14.1x53-d16 (including) 14.1x53-d16 (including)
Junos Juniper 14.1x53-d25 (including) 14.1x53-d25 (including)
Junos Juniper 14.1x53-d26 (including) 14.1x53-d26 (including)
Junos Juniper 14.2-r1 (including) 14.2-r1 (including)
Junos Juniper 14.2-r2 (including) 14.2-r2 (including)
Junos Juniper 14.2-r3 (including) 14.2-r3 (including)
Junos Juniper 15.1 (including) 15.1 (including)
Junos Juniper 15.1x49 (including) 15.1x49 (including)
Junos Juniper 16.1 (including) 16.1 (including)

References