1. Home
  2. CVE Database
  3. CVE-2019-0021
HIGH · 7.1

CVE-2019-0021

On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to view these secret information. This issue ...

Vulnerability Description

On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to view these secret information. This issue affects Juniper ATP 5.0 versions prior to 5.0.4.

CVSS Score

7.1

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
JuniperAdvanced Threat Prevention>= 5.0.0, < 5.0.4
JuniperAtp400-
JuniperAtp700-

Related Weaknesses (CWE)

CWE-532

References

FAQ

What is CVE-2019-0021?

CVE-2019-0021 is a vulnerability with a CVSS score of 7.1 (HIGH). On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to view these secret information. This issue ...

How severe is CVE-2019-0021?

CVE-2019-0021 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-0021?

Check the references section above for vendor advisories and patch information. Affected products include: Juniper Advanced Threat Prevention, Juniper Atp400, Juniper Atp700.