Test Kennung:	1.3.6.1.4.1.25623.1.0.105908
Kategorie:	JunOS Local Security Checks
Titel:	Juniper Networks Junos OS J-Web Persistent Cross Site Scripting Vulnerability
Zusammenfassung:	Persistent XSS Vulnerability in J-Web
Beschreibung:	Summary: Persistent XSS Vulnerability in J-Web Vulnerability Insight: A persistent cross site scripting vulnerability in J-Web may allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device. An attacker can inject web script or HTML even when J-Web is disabled, but the vulnerability can only be exploited when J-Web is used to monitor the system. Vulnerability Impact: A remote unauthenticated user can inject web script or HTML and steal sensitive data and credentials from a J-Web session and perform administrative actions on the Junos device. Affected Software/OS: Junos OS 11.4, 12.1, 12.2, 12.3, 13.1, 13.2, 13.3. Solution: New builds of Junos OS software are available from Juniper. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2711 BugTraq ID: 66770 http://www.securityfocus.com/bid/66770 http://www.securitytracker.com/id/1030061
Copyright	Copyright (C) 2014 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.