Medium severity5.5NVD Advisory· Published Apr 11, 2018· Updated Jun 17, 2026
CVE-2018-0023
CVE-2018-0023
Description
JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configuration and sample files of JSNAPy automation tool versions prior to 1.3.0 are created world writable. This insecure file and directory permission allows unprivileged local users to alter the files under this directory including inserting operations not intended by the package maintainer, system administrator, or other users. This issue only affects users who downloaded and installed JSNAPy from github.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
jsnapyPyPI | < 1.3.0 | 1.3.0 |
Affected products
2- Juniper Networks/Junos Snapshot Administrator (JSNAPy)v5Range: all
Patches
Vulnerability mechanics
References
6- www.securityfocus.com/bid/103745nvdThird Party AdvisoryVDB Entry
- github.com/advisories/GHSA-qc55-vm3j-74gpghsaADVISORY
- kb.juniper.net/JSA10856nvdMitigationVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2018-0023ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/jsnapy/PYSEC-2018-84.yamlghsaWEB
- web.archive.org/web/20200227125151/http://www.securityfocus.com/bid/103745ghsaWEB
News mentions
0No linked articles in our index yet.