Juniper Junos J-Web CVE-2014-2712 Multiple Cross Site Scripting Vulnerabilities
BID:66767
Info
Juniper Junos J-Web CVE-2014-2712 Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 66767 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-2712 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 10 2014 12:00AM |
| Updated: | Apr 10 2014 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Juniper Junos 12.1X45 Juniper Junos 12.1X44 Juniper Junos 12.1 Juniper Junos 11.4 |
| Not Vulnerable: |
Juniper Junos 12.2R1 Juniper Junos 12.1X46-D10 Juniper Junos 12.1X45-D20 Juniper Junos 12.1X44-D30 Juniper Junos 12.1R9 Juniper Junos 11.4R11 Juniper Junos 10.4R10 Juniper Junos 10.0S25 |
Discussion
Juniper Junos J-Web CVE-2014-2712 Multiple Cross Site Scripting Vulnerabilities
Juniper Junos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Juniper Junos 11.4, 12.1, 12.1X44, and 12.1X45 are vulnerable.
Juniper Junos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Juniper Junos 11.4, 12.1, 12.1X44, and 12.1X45 are vulnerable.
Exploit / POC
Juniper Junos J-Web CVE-2014-2712 Multiple Cross Site Scripting Vulnerabilities
An attackers can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.
An attackers can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.