Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2019-0030

Juniper ATP: Password hashing uses DES and a hardcoded salt

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Juniper ATP

  • 5.0 to < 5.0.3affected

References