mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-09-17 18:45:49 +00:00
336 lines
12 KiB
JSON
336 lines
12 KiB
JSON
{
|
|
"id": "CVE-2013-4689",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2013-10-17T23:55:04.627",
|
|
"lastModified": "2024-11-21T01:56:04.280",
|
|
"vulnStatus": "Modified",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "J-Web in Juniper Junos anterior a la versi\u00f3n 10.4R13, 11.4 anterior a 11.4R7, 12.1R anterior a la versi\u00f3n 12.1R6, 12.1X44 anterior a 12.1X44-D15, 12.1x45 anterior a la versi\u00f3n 12.1X45-D10, 12.2 anterior a 12.2R3, 12.3 anterior a la versi\u00f3n 12.3R2, y 13.1 anterior a 13.1R3 permite a atacantes remotos evadir el mecanismo de protecci\u00f3n CSRF y secuestrar la autenticaci\u00f3n de administrador para peticiones que (1) crean nuevas cuentas de administraci\u00f3n o (2) tiene otros impactos no especificados."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
|
|
"baseScore": 5.1,
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "HIGH",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "PARTIAL",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "PARTIAL"
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 4.9,
|
|
"impactScore": 6.4,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": true
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-352"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "10.4",
|
|
"matchCriteriaId": "87B7BB4C-BF3D-4E88-9422-816CB5ECE523"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:4.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BD172DD1-A2A1-4A01-9490-D5EE34E82D81"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:4.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "59812A01-EED0-4D83-8837-462E51519B91"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:4.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2EC5D0F9-0769-4227-8E77-AC62811DCF4D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:4.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "944F82C3-FF55-4658-B620-CE84F414F8A1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:4.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8D9AF7EE-F027-4F38-B33F-C9B4E53C8E38"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:5.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C0F33B07-7036-4A13-9B54-D191D8085295"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:5.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "FF54C9B6-F73B-421B-9B2C-A6F46A9C3618"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:5.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "ABFFA914-40DA-44DF-9C51-CBC753659C58"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:5.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2A9EA5F0-08D8-476B-B3B9-009E5BB0A6B2"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:5.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D815C4FB-9D6B-4DDF-A60A-4BD721D3CB21"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:5.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "658ED891-8E65-44F0-9797-07811AC5243F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:5.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9D6D0229-9738-4472-B452-0D93EAEA7446"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:5.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "24DD3017-5939-4EDC-8A9E-A673195B705E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:6.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "FC1B9023-0D1E-456A-8ED5-AF63FA8A7F44"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:6.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "78629980-A94C-4E13-86A4-C6CEC686B4B4"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:6.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0131C19D-4AF7-410A-A7C9-6AFD3494A743"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:6.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4EA66D3D-A91B-4573-B287-AB73DF17415C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:6.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B8089D28-839F-45CF-9247-969A9739E685"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:7.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3195C856-8C0F-44DA-8DBB-ADD1854F0D66"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:7.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "15480017-59ED-446C-9E9C-13D710ABC9E5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:7.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EF1C2CC2-9EA4-4017-BFF7-399FEBA0DE9E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:7.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8F443DB8-1E98-4D66-A75D-DCC4716218E8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:7.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E51EBFBB-9236-436F-AC05-C7AFD9452A73"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:7.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "851DD20A-9796-4B06-A9FF-C16D74310156"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:7.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "38C56079-E4AC-4CE2-805D-AB893F82070C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:8.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A0EE5FF2-A12F-41EF-9A3D-66B471288BF8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:8.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BB6086F9-431D-4A9D-BBFA-12A3A7FCE317"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:8.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5C8EFF72-7F38-4B55-B449-F22801D7C18B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:8.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "195D3916-4B92-4A49-8988-20F9B9E9FF34"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:8.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9AD4416F-E655-4D37-A28E-0623AA031423"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:9.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "378472AD-60F1-4A78-8256-DEF52ECB5602"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:9.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E2DB4226-A4B1-4647-88CA-74AAFA3AE022"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:9.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "DD7CAA11-F8FE-4732-A649-B9DD751917F9"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:9.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3F474869-F2AD-4B2A-BF9D-66BAA8F8C3F8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:9.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "DA28B556-9507-44B0-8F52-7FB9CADC74DF"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:9.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "135EA92C-6699-4686-8827-30E50C74BB0E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:11.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "41543223-0FA9-4CBE-8DEC-717CE5FFED79"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:12.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B40B8FD6-A597-4845-8E8E-63EFDF606006"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1B307477-C5F2-4D98-AF4C-640D326164C7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:12.1x45:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8E747970-4C27-4B46-9163-964252CB98F6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:12.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5FB9541A-2570-459A-87D6-5341C67B8EC8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8E014A0D-0054-4EBA-BA1F-035B74BD822F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:juniper:junos:13.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "71FB12AC-DB5A-444A-81E0-C0DDD06810EB"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://osvdb.org/98325",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/55166",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/62940",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://osvdb.org/98325",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/55166",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/62940",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
}
|
|
]
|
|
} |