Test ID:	1.3.6.1.4.1.25623.1.0.105942
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS Privilege Escalation Vulnerability
Summary:	Local privilege escalation vulnerability in Junos OS.
Description:	Summary: Local privilege escalation vulnerability in Junos OS. Vulnerability Insight: A problem with processing authorization attributes containing double quotes within the TACACS+ configuration may allow authenticated local users to run commands that should be denied by policy. Vulnerability Impact: Authenticated local users may be allowed to run commands that should be denied to them by policy leading to privilege escalation. Affected Software/OS: Junos OS 12.1, 12.3, 13.1, 13.2, 13.3 and 14.1 Solution: New builds of Junos OS software are available from Juniper. As a workaround do not use double quotes in TACACS+ configurations for user authentication. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-6384 BugTraq ID: 72077 http://www.securityfocus.com/bid/72077 http://www.securitytracker.com/id/1031547
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.