VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 15, 2019· Updated Sep 16, 2024

Juniper ATP: API and device keys are logged in a world-readable permissions file

CVE-2019-0004

Description

On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI interface. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

Affected products

2
  • Zyxel/ATPllm-fuzzy
    Range: <5.0.3
  • Juniper Networks/Juniper ATPv5
    Range: 5.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.