Description
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804.
Metrics
CVSS 2.0 4.0/10
AV:N/AC:L/Au:S/C:N/I:P/A:NWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Aug 16, 2013
- Last modified
- Jun 16, 2026
- NVD status
- Modified