VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Apr 8, 2020· Updated Jun 17, 2026

CVE-2020-1624

CVE-2020-1624

Description

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1.

Affected products

4
  • Juniper Networks/OS Evolved4 versions
    cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*range: <19.1r1
    • (no CPE)range: <19.1R1
    • (no CPE)range: <19.1R1
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.