CVE Vulnerabilities

CVE-2019-0029

Insertion of Sensitive Information into Log File

Published: Jan 15, 2019 | Modified: Nov 21, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Advanced_threat_prevention Juniper 5.0.0 (including) 5.0.3 (excluding)

Potential Mitigations

References