CVE-2020-1622
Junos OS Evolved: EvoSharedObjStore may leak sensitive information
- State
- Published
- Severity
- 5.5 Medium
- Published
- Apr 8, 2020
- Updated
- Sep 16, 2024
- Reserved
- Nov 4, 2019
Description
A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all versions of Junos OS Evolved prior to 19.1R1.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | juniper |
Weaknesses
- CWE-664 Improper Control of a Resource Through its Lifetime
Affected Products
| Product | Versions |
|---|---|
Junos OS EvolvedJuniper Networks |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.