CVE-2020-1620

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-664CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Apr 8, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-162006.5Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited CVE-2020-162013.3Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited bCVE-2020-162027.8WebAccess Node (All versions prior to 9.0.1) has incorrect permissions set for resources used by specific services, which may allow code exeCVE-2020-162037.8Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be exploited by processing a specCVE-2020-162049.8The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as CVE-2020-162057.2Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1CVE-2020-162069.0The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain acCVE-2020-162077.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by openiCVE-2020-162088.8The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a deviceCVE-2020-162099.8A malicious attacker could exploit the interface of the Fieldcomm Group HART-IP (release 1.0.0.0) by constructing messages with sufficientlyCVE-2020-16215.5A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions oCVE-2020-162109.0The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and per