ID de Prueba:	1.3.6.1.4.1.25623.1.0.103951
Categoría:	JunOS Local Security Checks
Título:	Juniper Networks Junos OS CSRF Protection Bypass Vulnerability in J-Web
Resumen:	A CSRF Protection bypass in J-Web allows an attacker to gain;unauthorized access to the affected device.
Descripción:	Summary: A CSRF Protection bypass in J-Web allows an attacker to gain unauthorized access to the affected device. Vulnerability Insight: A vulnerability in J-Web may allow remote attackers to bypass CSRF (Cross-Site Request Forgery) Protection in J-Web. Vulnerability Impact: An attacker can perform adimistrative actions such as creating new administrative accounts to gain complete control over the device. Affected Software/OS: Platforms running Junos OS 10.4, 11.4, 12.1, 12.1X44, 12.2, 12.3, or 13.1. Solution: New builds of Junos OS software are available from Juniper. As a workaround disable J-Web or limit access to only trusted hosts. CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4689 BugTraq ID: 62940 http://www.securityfocus.com/bid/62940 http://osvdb.org/98325 http://secunia.com/advisories/55166
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.