Test Kennung:	1.3.6.1.4.1.25623.1.0.103951
Kategorie:	JunOS Local Security Checks
Titel:	Juniper Networks Junos OS CSRF Protection Bypass Vulnerability in J-Web
Zusammenfassung:	A CSRF Protection bypass in J-Web allows an attacker to gain;unauthorized access to the affected device.
Beschreibung:	Summary: A CSRF Protection bypass in J-Web allows an attacker to gain unauthorized access to the affected device. Vulnerability Insight: A vulnerability in J-Web may allow remote attackers to bypass CSRF (Cross-Site Request Forgery) Protection in J-Web. Vulnerability Impact: An attacker can perform adimistrative actions such as creating new administrative accounts to gain complete control over the device. Affected Software/OS: Platforms running Junos OS 10.4, 11.4, 12.1, 12.1X44, 12.2, 12.3, or 13.1. Solution: New builds of Junos OS software are available from Juniper. As a workaround disable J-Web or limit access to only trusted hosts. CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4689 BugTraq ID: 62940 http://www.securityfocus.com/bid/62940 http://osvdb.org/98325 http://secunia.com/advisories/55166
Copyright	Copyright (C) 2013 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.