CVE-2019-0016
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Published at
2019-01-15
1097 days ago
Modified
2019-01-15
1097 days ago
2019
Year
The year of the turtle
Vulnerability RAW
{
"Title": {
"_text": "CVE-2019-0016"
},
"Notes": {
"Note": [
{
"_text": "A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1."
},
{
"_text": "2019-01-15"
},
{
"_text": "2019-01-15"
}
]
},
"CVE": {
"_text": "CVE-2019-0016"
},
"References": {
"Reference": {
"URL": {
"_text": "https://kb.juniper.net/JSA10917"
},
"Description": {
"_text": "CONFIRM:https://kb.juniper.net/JSA10917"
}
}
}
}