Test ID:	1.3.6.1.4.1.25623.1.0.103951
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS CSRF Protection Bypass Vulnerability in J-Web
Summary:	A CSRF Protection bypass in J-Web allows an attacker to gain;unauthorized access to the affected device.
Description:	Summary: A CSRF Protection bypass in J-Web allows an attacker to gain unauthorized access to the affected device. Vulnerability Insight: A vulnerability in J-Web may allow remote attackers to bypass CSRF (Cross-Site Request Forgery) Protection in J-Web. Vulnerability Impact: An attacker can perform adimistrative actions such as creating new administrative accounts to gain complete control over the device. Affected Software/OS: Platforms running Junos OS 10.4, 11.4, 12.1, 12.1X44, 12.2, 12.3, or 13.1. Solution: New builds of Junos OS software are available from Juniper. As a workaround disable J-Web or limit access to only trusted hosts. CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4689 BugTraq ID: 62940 http://www.securityfocus.com/bid/62940 http://osvdb.org/98325 http://secunia.com/advisories/55166
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.