CVE-2019-0029

Juniper ATP: Splunk credentials are in logged in clear text

High · published January 15, 2019

CVSS v3.0
8.8
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00336 · 25.7th percentile
Published
2019-01-15T21:00Z
EPSS history
Timeline
  • 15 JAN 21:00Z
    Juniper ATP: Splunk credentials are in logged in clear text
    cvelistv5