Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2019-0032

Junos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper Networks Service Insight versions from 15.1R1, prior to 18.1R1. Service Now versions from 15.1R1, prior to 18.1R1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Service Insight

  • 15.1R1 to < unspecifiedaffected
  • unspecified to < 18.1R1affected

Juniper Networks Service Now

  • 15.1R1 to < unspecifiedaffected
  • unspecified to < 18.1R1affected

References