CVE-2019-0027: Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration
A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
Affected Software
Remediation
Patch Available
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0027?
CVE-2019-0027 has a medium severity level due to its potential for cross-site scripting attacks.
How do I fix CVE-2019-0027?
To fix CVE-2019-0027, update the Juniper Advanced Threat Prevention software to version 5.0.4 or later.
Who is affected by CVE-2019-0027?
CVE-2019-0027 affects authenticated users of Juniper Advanced Threat Prevention versions 5.0.0 to 5.0.3.
What type of vulnerability is CVE-2019-0027?
CVE-2019-0027 is a persistent cross-site scripting (XSS) vulnerability that allows script injection.
What can happen if CVE-2019-0027 is exploited?
If exploited, CVE-2019-0027 can lead to the theft of sensitive data and credentials from web administration sessions.