CVE-2019-0017 MEDIUM

CVE-2019-0017: Junos Space: Unrestricted file upload vulnerability

Vendor Juniper Networks
Product Junos Space
Published January 15, 2019
Last update September 16, 2024

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.

Key dates

02Disclosure timeline

January 15, 2019 CVE published
September 16, 2024 Record updated