ID de Prueba:	1.3.6.1.4.1.25623.1.0.105908
Categoría:	JunOS Local Security Checks
Título:	Juniper Networks Junos OS J-Web Persistent Cross Site Scripting Vulnerability
Resumen:	Persistent XSS Vulnerability in J-Web
Descripción:	Summary: Persistent XSS Vulnerability in J-Web Vulnerability Insight: A persistent cross site scripting vulnerability in J-Web may allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device. An attacker can inject web script or HTML even when J-Web is disabled, but the vulnerability can only be exploited when J-Web is used to monitor the system. Vulnerability Impact: A remote unauthenticated user can inject web script or HTML and steal sensitive data and credentials from a J-Web session and perform administrative actions on the Junos device. Affected Software/OS: Junos OS 11.4, 12.1, 12.2, 12.3, 13.1, 13.2, 13.3. Solution: New builds of Junos OS software are available from Juniper. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2711 BugTraq ID: 66770 http://www.securityfocus.com/bid/66770 http://www.securitytracker.com/id/1030061
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.