CVE-2018-0046: Junos Space: Reflected Cross-site Scripting vulnerability in OpenNMS

Published Oct 10, 2018

Updated

A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space administrators or perform administrative actions. This issue affects Juniper Networks Junos Space versions prior to 18.2R1.

Affected Software

1 affected component

Juniper Junos Space=18.1r1

Remediation

Patch Available

https://github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0d

Information

The following software releases have been updated to resolve this specific issue: Junos Space 18.2R1, and all subsequent releases.

Event History

Oct 10, 2018

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0046?

CVE-2018-0046 has a medium severity level due to the potential for information theft and unauthorized administrative actions.

How do I fix CVE-2018-0046?

To mitigate CVE-2018-0046, ensure you are running the latest version of Juniper Networks Junos Space that addresses this vulnerability.

Who is affected by CVE-2018-0046?

CVE-2018-0046 affects administrators using the OpenNMS included with Juniper Networks Junos Space version 18.1r1.

What type of vulnerability is CVE-2018-0046?

CVE-2018-0046 is classified as a reflected cross-site scripting (XSS) vulnerability.

What could an attacker achieve with CVE-2018-0046?

An attacker could potentially steal sensitive information or session credentials from affected Junos Space administrators.