CVE-2013-5097: Medium severity juniper networks junos space vulnerability
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes it easier for remote authenticated users to obtain sensitive information via a dictionary attack, aka PR 879462.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5097?
CVE-2013-5097 has a moderate severity rating due to improper access restrictions that can lead to exposure of sensitive user information.
How do I fix CVE-2013-5097?
To fix CVE-2013-5097, update your Junos Space software to version 13.1R1.6 or later, which addresses this vulnerability.
Who is affected by CVE-2013-5097?
CVE-2013-5097 affects users of Juniper Junos Space, specifically versions 11.1 through 12.3 and the JA1500 appliance.
What are the potential risks of CVE-2013-5097?
The potential risks of CVE-2013-5097 include unauthorized access to user accounts and password hashes, which could lead to a successful dictionary attack.
Is there a workaround for CVE-2013-5097?
There are no known workarounds for CVE-2013-5097, so upgrading to a secure version is necessary to mitigate the threat.