ID de Prueba:	1.3.6.1.4.1.25623.1.0.105919
Categoría:	JunOS Local Security Checks
Título:	Juniper Networks Junos OS Web Authentication XSS Vulnerability
Resumen:	XSS vulnerability in webauth
Descripción:	Summary: XSS vulnerability in webauth Vulnerability Insight: A reflected cross site scripting (XSS) vulnerability in SRX Web Authentication (webauth) may allow the stealing of sensitive information or session credentials from firewall users. This issue affects the device only when Web Authentication is used for firewall user authentication. Vulnerability Impact: An attacker may steal sensitive information or session credentials from firewall users. Affected Software/OS: Junos OS 11.4, 12.1X44, 12.1X45, 12.1X46 Solution: New builds of Junos OS software are available from Juniper. As a workaround use Pass-Through Authentication rather than Web Authentication as an alternative form of firewall user authentication. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3821 BugTraq ID: 68548 http://www.securityfocus.com/bid/68548 http://www.securitytracker.com/id/1030563
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.