CVE-2023-28963
CVSS V2 None
CVSS V3 None
Description
An Improper Authentication vulnerability in cert-mgmt.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to read arbitrary files from temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to 19.1R3-S10; 19.2 versions prior to 19.2R3-S7; 19.3 versions prior to 19.3R3-S8; 19.4 versions prior to 19.4R3-S11; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S7; 20.3 version 20.3R1 and later versions; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S5; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2.
Overview
- CVE ID
- CVE-2023-28963
- Assigner
- sirt@juniper.net
- Vulnerability Status
- Undergoing Analysis
- Published Version
- 2023-04-17T22:15:08
- Last Modified Date
- 2023-04-18T03:15:28
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://supportportal.juniper.net/JSA70587 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-28963 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28963 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-04-18 00:00:43 | Added to TrackCVE | |||
| 2023-04-18 00:00:46 | Weakness Enumeration | new | ||
| 2023-04-18 04:00:52 | 2023-04-18T03:15:28 | CVE Modified Date | updated | |
| 2023-04-18 04:00:52 | Received | Awaiting Analysis | Vulnerability Status | updated |
| 2023-04-24 13:00:48 | Awaiting Analysis | Undergoing Analysis | Vulnerability Status | updated |