CVE-2019-0020: Juniper ATP: Hard coded credentials used in Web Collector
Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0020?
CVE-2019-0020 is considered to have a high severity due to the presence of hard coded credentials allowing full control over installations.
How do I fix CVE-2019-0020?
To fix CVE-2019-0020, update to Juniper ATP version 5.0.3 or later, where the hard coded credentials have been removed.
What products are affected by CVE-2019-0020?
CVE-2019-0020 affects Juniper Networks Advanced Threat Prevention versions up to 5.0.2.
Can CVE-2019-0020 be exploited remotely?
Yes, CVE-2019-0020 can be exploited remotely due to the hard coded credentials accessible over the web interface.
Are there any known workarounds for CVE-2019-0020?
There are no specific workarounds for CVE-2019-0020; upgrading to a safe version is the recommended action.