CVE-2020-1624
Junos OS Evolved: objmon logs may leak sensitive information
- State
- Published
- Severity
- 5.5 Medium
- Published
- Apr 8, 2020
- Updated
- Sep 17, 2024
- Reserved
- Nov 4, 2019
Description
A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | juniper |
Weaknesses
- CWE-532 Information Exposure Through Log Files
Affected Products
| Product | Versions |
|---|---|
Junos OS EvolvedJuniper Networks |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.