CVE-2020-1621: Junos OS Evolved: Configd leaks hashes via stream and is world readable
A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 19.3R1-EVO
Event History
Frequently Asked Questions
What is CVE-2020-1621?
CVE-2020-1621 is a vulnerability in Junos OS Evolved that allows a local authenticated user with shell access to obtain the hashed values of login passwords via configd traces.
What is the severity of CVE-2020-1621?
The severity of CVE-2020-1621 is medium (5.5).
Which versions of Junos OS Evolved are affected by CVE-2020-1621?
All versions of Junos OS Evolved prior to 19.3R1 are affected by CVE-2020-1621.
How can a local authenticated user exploit CVE-2020-1621?
A local authenticated user with shell access can exploit CVE-2020-1621 to obtain the hashed values of login passwords via configd traces.
Is there a Juniper Knowledge Base article about CVE-2020-1621?
Yes, you can find more information about CVE-2020-1621 in Juniper Knowledge Base article JSA11003: https://kb.juniper.net/JSA11003