csirt@kutim:~/threat-intel/cve/CVE-2021-0220

Katalog CVE

CVSS 6.8 · Medium EPSS 1,2%

Kerentanan Storing Passwords in a Recoverable Format pada juniper junos space. Skor CVSS 3.1 6.8 (Medium) menurut juniper.net.

Deskripsi (NVD)

The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser (for example via XSS) or access cached contents may be able to obtain a copy of credentials managed by Junos Space. The impact of a successful attack includes, but is not limited to, obtaining access to other servers connected to the Junos Space Management Platform. This issue affects Juniper Networks Junos Space versions prior to 20.3R1.

Rincian

Terbit di NVD
15 Januari 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.8 (Medium), sumber juniper.net
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-257: Storing Passwords in a Recoverable Format
CWE-522: Insufficiently Protected Credentials
EPSS (30 hari)
1,2% peluang dieksploitasi; lebih tinggi dari 67,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
juniper junos space Versi 1.0
juniper junos space Versi 1.1
juniper junos space Versi 1.2
juniper junos space Versi 1.3
juniper junos space Versi 1.4
juniper junos space Versi 2.0
juniper junos space Versi 11.1
juniper junos space Versi 11.2
juniper junos space Versi 11.3
juniper junos space Versi 11.4
juniper junos space Versi 12.1
juniper junos space Versi 12.2
juniper junos space Versi 12.3
juniper junos space Versi 13.1
juniper junos space Versi 13.1 r1.8
juniper junos space Versi 13.3 r3
juniper junos space Versi 14.1
juniper junos space Versi 15.1
juniper junos space Versi 15.1 r2
juniper junos space Versi 15.1 r4
juniper junos space Versi 15.2
juniper junos space Versi 16.1
juniper junos space Versi 17.1
juniper junos space Versi 17.2
juniper junos space Versi 17.2 r1.4
juniper junos space Versi 18.1
juniper junos space Versi 18.1r1
juniper junos space Versi 18.2
juniper junos space Versi 18.3
juniper junos space Versi 18.4
juniper junos space Versi 19.1
juniper junos space Versi 15.1 r1
juniper junos space Versi 15.2 r1
juniper junos space Versi 18.1 r1
juniper junos space Versi 18.2 r1
juniper junos space Versi 18.3 r1
juniper junos space Versi 18.4 r1
juniper junos space Versi 19.1 r1
juniper junos space Versi 19.2 r1
juniper junos space Versi 19.3 r1
juniper junos space Versi 19.4 r1
juniper junos space Versi 20.1 r1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.