CVE-2013-4689: CSRF
First published: Thu Oct 17 2013(Updated: )
J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Juniper JUNOS | <=10.4 | |
| Juniper JUNOS | =4.0 | |
| Juniper JUNOS | =4.1 | |
| Juniper JUNOS | =4.2 | |
| Juniper JUNOS | =4.3 | |
| Juniper JUNOS | =4.4 | |
| Juniper JUNOS | =5.0 | |
| Juniper JUNOS | =5.1 | |
| Juniper JUNOS | =5.2 | |
| Juniper JUNOS | =5.3 | |
| Juniper JUNOS | =5.4 | |
| Juniper JUNOS | =5.5 | |
| Juniper JUNOS | =5.6 | |
| Juniper JUNOS | =5.7 | |
| Juniper JUNOS | =6.0 | |
| Juniper JUNOS | =6.1 | |
| Juniper JUNOS | =6.2 | |
| Juniper JUNOS | =6.3 | |
| Juniper JUNOS | =6.4 | |
| Juniper JUNOS | =7.0 | |
| Juniper JUNOS | =7.1 | |
| Juniper JUNOS | =7.2 | |
| Juniper JUNOS | =7.3 | |
| Juniper JUNOS | =7.4 | |
| Juniper JUNOS | =7.5 | |
| Juniper JUNOS | =7.6 | |
| Juniper JUNOS | =8.0 | |
| Juniper JUNOS | =8.1 | |
| Juniper JUNOS | =8.2 | |
| Juniper JUNOS | =8.3 | |
| Juniper JUNOS | =8.4 | |
| Juniper JUNOS | =9.0 | |
| Juniper JUNOS | =9.1 | |
| Juniper JUNOS | =9.2 | |
| Juniper JUNOS | =9.4 | |
| Juniper JUNOS | =9.5 | |
| Juniper JUNOS | =9.6 | |
| Juniper JUNOS | =11.4 | |
| Juniper JUNOS | =12.1 | |
| Juniper JUNOS | =12.1x44 | |
| Juniper JUNOS | =12.1x45 | |
| Juniper JUNOS | =12.2 | |
| Juniper JUNOS | =12.3 | |
| Juniper JUNOS | =13.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- agent/type
- agent/description
- agent/tags
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/juniper
- canonical/juniper junos
- version/juniper junos/10.4
- version/juniper junos/4.0
- version/juniper junos/4.1
- version/juniper junos/4.2
- version/juniper junos/4.3
- version/juniper junos/4.4
- version/juniper junos/5.0
- version/juniper junos/5.1
- version/juniper junos/5.2
- version/juniper junos/5.3
- version/juniper junos/5.4
- version/juniper junos/5.5
- version/juniper junos/5.6
- version/juniper junos/5.7
- version/juniper junos/6.0
- version/juniper junos/6.1
- version/juniper junos/6.2
- version/juniper junos/6.3
- version/juniper junos/6.4
- version/juniper junos/7.0
- version/juniper junos/7.1
- version/juniper junos/7.2
- version/juniper junos/7.3
- version/juniper junos/7.4
- version/juniper junos/7.5
- version/juniper junos/7.6
- version/juniper junos/8.0
- version/juniper junos/8.1
- version/juniper junos/8.2
- version/juniper junos/8.3
- version/juniper junos/8.4
- version/juniper junos/9.0
- version/juniper junos/9.1
- version/juniper junos/9.2
- version/juniper junos/9.4
- version/juniper junos/9.5
- version/juniper junos/9.6
- version/juniper junos/11.4
- version/juniper junos/12.1
- version/juniper junos/12.1x44
- version/juniper junos/12.1x45
- version/juniper junos/12.2
- version/juniper junos/12.3
- version/juniper junos/13.1