CVE-2020-1611 MEDIUM

CVE-2020-1611: Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.

Vendor Juniper Networks
Product Junos Space
Published January 15, 2020
Last update September 16, 2024

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1.

Key dates

02Disclosure timeline

January 15, 2020 CVE published
September 16, 2024 Record updated