Juniper Junos Space CVE-2014-3413 Information Disclosure Vulnerability

Bugtraq ID:	104525
Class:	Design Error
CVE:	CVE-2014-3413
Remote:	Yes
Local:	No
Published:	Apr 05 2018 12:00AM
Updated:	Apr 05 2018 12:00AM
Credit:	Tenable Network Security
Vulnerable:	Juniper JUNOS Space 1.2.2 Juniper JUNOS Space 13.3 Juniper JUNOS Space 13.1R1.6 Juniper JUNOS Space 13.1R1 Juniper JUNOS Space 13.1P1.14 Juniper JUNOS Space 13.1 R1.8 Juniper JUNOS Space 13.1 Juniper JUNOS Space 12.3R2.8 Juniper JUNOS Space 12.3R1.3 Juniper JUNOS Space 12.3P2.8 Juniper JUNOS Space 12.3 Juniper JUNOS Space 12.2 Juniper JUNOS Space 12.1 Juniper JUNOS Space 11.4R5.5 Juniper JUNOS Space 11.4 Juniper JUNOS Space 11.3 Juniper JUNOS Space 11.2 Juniper JUNOS Space 11.1 Juniper JUNOS Space 1.4 Juniper JUNOS Space 1.3 Juniper JUNOS Space 1.0
Not Vulnerable:	Juniper JUNOS Space 13.3R1.8

Juniper Junos Space CVE-2014-3413 Information Disclosure Vulnerability

Juniper Junos Space is prone to an information-disclosure vulnerability.

Attackers can leverage this issue to gain access to sensitive information. Information obtained will aid in further attacks.

Versions prior to Juniper Junos Space 13.3R1.8 are vulnerable.

Juniper Junos Space CVE-2014-3413 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Juniper Junos Space CVE-2014-3413 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Juniper Junos Space CVE-2014-3413 Information Disclosure Vulnerability

References:

• Juniper Networks Homepage (Juniper Networks)
  
• Junos Space Homepage (Juniper Networks)
  
• 2014-05 Junos Space: Multiple vulnerabilities resolved by third party software u (Juniper Networks)
  
• Juniper Junos Space MySQL Server Unspecified Hardcoded Credentials (Tenable)