CVE-2020-1622: Junos OS Evolved: EvoSharedObjStore may leak sensitive information
A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all versions of Junos OS Evolved prior to 19.1R1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Junos OS Evolved (EvoSharedObjStore)to a version that resolves this vulnerability.Fixed in 19.1R1-EVO
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1622?
CVE-2020-1622 is considered a high severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2020-1622?
To remediate CVE-2020-1622, upgrade your Junos OS Evolved to version 19.1R1 or later.
Who is affected by CVE-2020-1622?
All local, authenticated users with shell access on versions of Junos OS Evolved prior to 19.1R1 are affected by CVE-2020-1622.
What information can be leaked due to CVE-2020-1622?
CVE-2020-1622 may leak hashed values of login passwords and shared secrets.
Is CVE-2020-1622 present in newer versions of Junos OS Evolved?
No, CVE-2020-1622 is not present in Junos OS Evolved versions 19.1R1 and later.