CVE-2019-0018: Juniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menu
A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
Affected Software
Remediation
Patch Available
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0018?
CVE-2019-0018 has a medium severity rating due to its potential for exploitation through persistent cross-site scripting.
How do I fix CVE-2019-0018?
To fix CVE-2019-0018, upgrade to Juniper Advanced Threat Prevention version 5.0.4 or later.
What impact does CVE-2019-0018 have on security?
CVE-2019-0018 can allow authenticated users to inject scripts, potentially leading to unauthorized access to sensitive data.
Who is affected by CVE-2019-0018?
CVE-2019-0018 affects authenticated users of Juniper Advanced Threat Prevention versions 5.0.0 to 5.0.3.
Can CVE-2019-0018 lead to data theft?
Yes, CVE-2019-0018 can enable an attacker to steal sensitive data and credentials through malicious script injection.