Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.105993
Category:JunOS Local Security Checks
Title:Juniper Networks Junos OS J-Web Clickjacking Vulnerability
Summary:Junos OS is prone to Clickjacking vulnerability on J-Web.
Description:Summary:
Junos OS is prone to Clickjacking vulnerability on J-Web.

Vulnerability Insight:
Junos J-Web was missing 'X-Frame-Options' HTTP header
that may facilitate Clickjacking type of attacks against authenticated or unauthenticated pages on J-Web.

Vulnerability Impact:
An attacker can potentially trick Junos J-Web users into
performing certain administrative tasks.

Affected Software/OS:
Junos OS 11.4, 12.1, 12.2, 12.3, 13.2, 13.3, 14.1

Solution:
New builds of Junos OS software are available from Juniper.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2015-3004
BugTraq ID: 74017
http://www.securityfocus.com/bid/74017
http://www.securitytracker.com/id/1032090
CopyrightCopyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.