CVE-2013-5096 - Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804

Back Back to CVE browser

MEDIUM

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804

Published Aug 16, 2013

4.0

MEDIUM

CVSS 2.0

EPSS 1.07%

Description

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (3)

http://kb.juniper.net/JSA10585
x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/bid/61794
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1028923
vdb-entryx_refsource_SECTRACK

Link	Providers	Tags
http://kb.juniper.net/JSA10585		x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/bid/61794		vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1028923		vdb-entryx_refsource_SECTRACK

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 16, 2013

Updated Aug 6, 2024

Reserved Aug 9, 2013

Link CVE-2013-5096

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-5096

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-5096