CVE-2019-0023: Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Golden VM menu
A persistent cross-site scripting (XSS) vulnerability in the Golden VM menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
Affected Software
Remediation
Patch Available
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0023?
CVE-2019-0023 has a medium severity rating due to its potential to allow unauthorized script injection.
How do I fix CVE-2019-0023?
To mitigate CVE-2019-0023, update your Juniper Advanced Threat Prevention software to version 5.0.4 or later.
What type of attack does CVE-2019-0023 enable?
CVE-2019-0023 enables a persistent cross-site scripting (XSS) attack that can steal sensitive data and credentials.
Who is affected by CVE-2019-0023?
Authenticated users of Juniper Advanced Threat Prevention versions 5.0.0 to 5.0.3 are vulnerable to CVE-2019-0023.
What are the potential consequences of exploiting CVE-2019-0023?
Exploiting CVE-2019-0023 could lead to unauthorized access and data theft from the affected web administration session.