CVE-2019-0022 - Juniper ATP: Two hard coded credentials sharing the same password give an attacker the ability to take control of any installation of the software.

Back Back to CVE browser

CRITICAL

Juniper ATP: Two hard coded credentials sharing the same password give an attacker the ability to take control of any installation of the software.

Published Jan 15, 2019

10.0

CRITICAL

CVSS 3.0

EPSS 1.13%

Description

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3.

Affected products

Vendor Juniper Networks Product Juniper ATP Default
n/a
- Version
  5.0
  Status
  affected
  Constraints
  <5.0.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Juniper Networks

Juniper ATP

n/a

Version	Status	Constraints
5.0	affected	<5.0.3

Remediation

Vendor solution

The following software release have been updated to resolve this specific issue: 5.0.3 and all subsequent releases.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (1)

https://kb.juniper.net/JSA10918
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://kb.juniper.net/JSA10918		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner juniper

Published Jan 15, 2019

Updated Sep 16, 2024

Reserved Oct 11, 2018

Link CVE-2019-0022

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0022

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-0022