CVE-2020-1621: Junos OS Evolved: Configd leaks hashes via stream and is world readable
First published: Wed Apr 08 2020(Updated: )
A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1.
Credit: sirt@juniper.net
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Juniper Junos Os Evolved | <19.3r1 |
Remedy
The following software releases have been updated to resolve this specific issue: 19.3R1-EVO and all subsequent releases.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-1621?
CVE-2020-1621 is a vulnerability in Junos OS Evolved that allows a local authenticated user with shell access to obtain the hashed values of login passwords via configd traces.
What is the severity of CVE-2020-1621?
The severity of CVE-2020-1621 is medium (5.5).
Which versions of Junos OS Evolved are affected by CVE-2020-1621?
All versions of Junos OS Evolved prior to 19.3R1 are affected by CVE-2020-1621.
How can a local authenticated user exploit CVE-2020-1621?
A local authenticated user with shell access can exploit CVE-2020-1621 to obtain the hashed values of login passwords via configd traces.
Is there a Juniper Knowledge Base article about CVE-2020-1621?
Yes, you can find more information about CVE-2020-1621 in Juniper Knowledge Base article JSA11003: https://kb.juniper.net/JSA11003
- collector/nvd-index
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/remedy
- agent/last-modified-date
- agent/title
- agent/author
- agent/severity
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/juniper
- canonical/juniper junos os evolved