VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jan 15, 2019· Updated Jun 17, 2026

CVE-2019-0016

CVE-2019-0016

Description

A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.

Affected products

25
  • Juniper Networks/Junos Space25 versions
    cpe:2.3:a:juniper:junos_space:13.3:r1:*:*:*:*:*:*+ 24 more
    • cpe:2.3:a:juniper:junos_space:13.3:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:13.3:r2:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:13.3:r3:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:13.3:r4:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:14.1:-:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:14.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:14.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:14.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.2:-:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.2:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.2:r2:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:16.1:-:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:16.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:16.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:16.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:17.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:17.2:r1.4:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:18.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:18.2:r1:*:*:*:*:*:*
    • (no CPE)range: <18.3R1
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.