CVE-2019-0027 - Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration · CoreCVE

Back Back to CVE browser

MEDIUM

Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration

Published Jan 15, 2019

5.4

MEDIUM

CVSS 3.0

EPSS 0.62%

Description

A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

Affected products

Vendor Juniper Networks Product Juniper ATP Default
n/a
- Version
  5
  Status
  affected
  Constraints
  <5.0.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Juniper Networks

n/a

Version	Status	Constraints
5	affected	<5.0.3

Remediation

Vendor solution

The following software release have been updated to resolve this specific issue: 5.0.3 and all subsequent releases.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://kb.juniper.net/JSA10918
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://kb.juniper.net/JSA10918		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner juniper

Published Jan 15, 2019

Updated Sep 17, 2024

Reserved Oct 11, 2018

Link CVE-2019-0027

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0027

Severity n/a

Public date n/a

Links CVE-2019-0027