CVE-2013-5097 PUBLISHED CVSS 4 MEDIUM

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes it easier for remote authenticated users to obtain sensitive information via a dictionary attack, aka PR 879462.

EPSS 0.18% · 38.9th percentile

Risk Scores

CVSS v2.0
4
EPSS Score
0.18%
38.9th percentile

Affected Products

VendorProductVersions
juniperjunos_space_ja1500_appliance
n/an/an/a
juniperjunos_space11.2, 11.4, 12.2
juniperjunos_space_virtual_appliance

Timeline

References

Open in Interactive Console →