Test ID:	1.3.6.1.4.1.25623.1.0.106025
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS J-Web Multiple Vulnerabilities
Summary:	Junos OS is prone to multiple error handling vulnerabilities in J-Web.
Description:	Summary: Junos OS is prone to multiple error handling vulnerabilities in J-Web. Vulnerability Insight: Multiple vulnerabilities exist in J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web service. Vulnerability Impact: The cross site scripting vulnerability may allow a remote network based attacker to steal sensitive information such as session credentials from an administrative user or perform administrative actions through an administrative user's browser. Affected Software/OS: Junos OS 12.1, 12.3, 13.1, 13.2, 13.3 and 14.1 Solution: New builds of Junos OS software are available from Juniper. As a workaround disable J-Web. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-6447 http://www.securitytracker.com/id/1032846
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.