CVE-2019-0026: Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration
A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
Affected Software
Remediation
Patch Available
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0026?
CVE-2019-0026 is classified with a high severity rating due to its potential for persistent cross-site scripting (XSS) attacks.
How do I fix CVE-2019-0026?
To mitigate CVE-2019-0026, update your Juniper Advanced Threat Prevention software to version 5.0.4 or later.
Who is affected by CVE-2019-0026?
CVE-2019-0026 affects users of Juniper Advanced Threat Prevention versions from 5.0.0 to 5.0.3.
What type of vulnerability is CVE-2019-0026?
CVE-2019-0026 is a persistent cross-site scripting (XSS) vulnerability which allows script injection and data theft.
What kind of attacks can be performed with CVE-2019-0026?
CVE-2019-0026 can be exploited to inject arbitrary scripts, potentially allowing attackers to steal credentials from a web administration session.