← CVE Intelligence

CVE-2024-39532

Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user PUBLISHED

Description (CNA)

An Insertion of Sensitive Information into Log File vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to access sensitive information. When another user performs a specific operation, sensitive information is stored as plain text in a specific log file, so that a high-privileged attacker has access to this information. This issue affects: Junos OS: * All versions before 21.2R3-S9; * 21.4 versions before 21.4R3-S9; * 22.2 versions before 22.2R2-S1, 22.2R3; * 22.3 versions before 22.3R1-S1, 22.3R2; Junos OS Evolved: * All versions before before 22.1R3-EVO; * 22.2-EVO versions before 22.2R2-S1-EVO, 22.2R3-EVO; * 22.3-EVO versions before 22.3R1-S1-EVO, 22.3R2-EVO.

Affected (CNA)

Vendor / productVersions
Juniper Networks / Junos OSaffected 0 before 21.2R3-S9; affected 21.4 before 21.4R3-S9; affected 22.2 before 22.2R2-S1, 22.2R3; affected 22.3 before 22.3R1-S1, 22.3R2
Juniper Networks / Junos OS Evolvedaffected 0 before 22.1R3-EVO; affected 22.2-EVO before 22.2R2-S1-EVO, 22.2R3-EVO; affected 22.3-EVO before 22.3R1-S1-EVO, 22.3R2-EVO

CWE

CWE-532

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.