Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2019-0021

Juniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to view these secret information. This issue affects Juniper ATP 5.0 versions prior to 5.0.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Juniper ATP

  • 5.0 to < 5.0.4affected

References