CVE-2019-0024: Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Email Collectors menu
A persistent cross-site scripting (XSS) vulnerability in the Email Collectors menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
Affected Software
Remediation
Patch Available
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0024?
CVE-2019-0024 has been classified as a medium severity vulnerability due to its potential for data theft and unauthorized access.
How do I fix CVE-2019-0024?
To fix CVE-2019-0024, users should upgrade to a patched version of Juniper Advanced Threat Prevention that is newer than 5.0.3.
Who is affected by CVE-2019-0024?
Authenticated users of Juniper Advanced Threat Prevention versions between 5.0.0 and 5.0.3 are affected by CVE-2019-0024.
What can an attacker do with CVE-2019-0024?
An attacker exploiting CVE-2019-0024 can inject arbitrary scripts to steal sensitive data and credentials from web administration sessions.
How does CVE-2019-0024 impact web administration security?
CVE-2019-0024 compromises web administration security by allowing the injection of malicious scripts that can hijack user data.