VDB-162805 · CVE-2020-1673 · JSA11070

Juniper Junos J-Web cross site scripting

Una vulnerabilidad clasificada como problemática fue encontrada en Juniper Junos (Router Operating System). Una función desconocida del componente J-Web es afectada por esta vulnerabilidad. Una actualización elimina esta vulnerabilidad.

Cronología

Usuario

Campo

Commit Conf

Approve Conf

ID	Comprometido	Usuario	Campo	Cambio	Observaciones	Moderado	Razón	C
10639946	2020-11-20	VulD...	cve_cna	Juniper Networks, Inc.	nvd.nist.gov	2020-11-20	aceptado	70
10639945	2020-11-20	VulD...	cvss2_nvd_ai	C	nvd.nist.gov	2020-11-20	aceptado	70
10639944	2020-11-20	VulD...	cvss2_nvd_ii	C	nvd.nist.gov	2020-11-20	aceptado	70
10639943	2020-11-20	VulD...	cvss2_nvd_ci	C	nvd.nist.gov	2020-11-20	aceptado	70
10639942	2020-11-20	VulD...	cvss2_nvd_au	N	nvd.nist.gov	2020-11-20	aceptado	70
10639941	2020-11-20	VulD...	cvss2_nvd_ac	H	nvd.nist.gov	2020-11-20	aceptado	70
10639940	2020-11-20	VulD...	cvss2_nvd_av	N	nvd.nist.gov	2020-11-20	aceptado	70
10639939	2020-11-20	VulD...	confirm_url	https://kb.juniper.net/JSA11070	cve.mitre.org	2020-11-20	aceptado	70
10639938	2020-11-20	VulD...	cve_nvd_summary	Insufficient Cross-Site Scripting (XSS) protection in Juniper Networks J-Web and web based (HTTP/HTTPS) services allows an unauthenticated attacker to hijack the target user's HTTP/HTTPS session and perform administrative actions on the Junos device as the targeted user. This issue only affects Juniper Networks Junos OS devices with HTTP/HTTPS services enabled such as J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP). Junos OS devices with HTTP/HTTPS services disabled are not affected. If HTTP/HTTPS services are enabled, the following command will show the httpd processes: user@device> show system processes \| match http 5260 - S 0:00.13 /usr/sbin/httpd-gk -N 5797 - I 0:00.10 /usr/sbin/httpd --config /jail/var/etc/httpd.conf In order to successfully exploit this vulnerability, the attacker needs to convince the device administrator to take action such as clicking the crafted URL sent via phishing email or convince the administrator to input data in the browser console. This issue affects Juniper Networks Junos OS: 18.1 versions prior to 18.1R3-S1; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R2-S5, 18.4R3-S2; 19.1 versions prior to 19.1R2-S2, 19.1R3-S1; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2; 20.1 versions prior to 20.1R1-S2, 20.1R2. This issue does not affect Juniper Networks Junos OS prior to 18.1R1.	cve.mitre.org	2020-11-20	aceptado	70
10639937	2020-11-20	VulD...	cve_assigned	1572822000	cve.mitre.org	2020-11-20	aceptado	70
10639947	2020-11-19	VulD...	cvss2_nvd_basescore	7.6	nist.gov	2020-11-19	aceptado	90
10528384	2020-10-17	VulD...	price_0day	$5k-$25k	see documentation	2020-10-17	aceptado	90
10528383	2020-10-17	VulD...	cvss3_meta_tempscore	4.1	see documentation	2020-10-17	aceptado	90
10528382	2020-10-17	VulD...	cvss3_meta_basescore	4.3	see documentation	2020-10-17	aceptado	90
10528381	2020-10-17	VulD...	cvss3_vuldb_tempscore	4.1		2020-10-17	aceptado	90
10528380	2020-10-17	VulD...	cvss3_vuldb_basescore	4.3		2020-10-17	aceptado	90
10528379	2020-10-17	VulD...	cvss2_vuldb_tempscore	4.4		2020-10-17	aceptado	90
10528378	2020-10-17	VulD...	cvss2_vuldb_basescore	5.0		2020-10-17	aceptado	90
10528377	2020-10-17	VulD...	cvss3_vuldb_e	X	derived from historical data	2020-10-17	aceptado	80
10528376	2020-10-17	VulD...	cvss2_vuldb_rc	ND	derived from historical data	2020-10-17	aceptado	80