CVE-2019-0016 — Junos Space: Authenticated user able to delete devices without delete device privileges

CVE-2019-0016

Junos Space: Authenticated user able to delete devices without delete device privileges PUBLISHED

Description (CNA)

A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.

Affected (CNA)

Vendor / product	Versions
Juniper Networks / Junos Space	affected unspecified before 18.3R1

CWE

No CWE identifiers supplied.

References

https://kb.juniper.net/JSA10917

ADP enrichment

CVE

No English description supplied.

https://kb.juniper.net/JSA10917