CVE-2019-0004 — MEDIUM (5.5)

Q: How severe is CVE-2019-0004?

CVE-2019-0004 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2019-0004?

Check the references section above for vendor advisories and patch information. Affected products include: Juniper Advanced Threat Prevention, Juniper Atp400, Juniper Atp700.

Vulnerability Description

On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI interface. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Juniper	Advanced Threat Prevention	>= 5.0.0, < 5.0.3
Juniper	Atp400	-
Juniper	Atp700	-

Related Weaknesses (CWE)

CWE-532

References

https://kb.juniper.net/JSA10918Vendor Advisory
https://kb.juniper.net/JSA10918Vendor Advisory

FAQ

What is CVE-2019-0004?

CVE-2019-0004 is a vulnerability with a CVSS score of 5.5 (MEDIUM). On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI interface. This issue aff...

How severe is CVE-2019-0004?

CVE-2019-0004 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-0004?

Check the references section above for vendor advisories and patch information. Affected products include: Juniper Advanced Threat Prevention, Juniper Atp400, Juniper Atp700.