Vulnerability-Lookup

CNVD-2016-09601

Vulnerability from cnvd - Published: 2016-10-20

Title

Juniper Junos J-Web跨站脚本攻击漏洞

Description

Juniper Junos是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件系统的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Junos J-Web存在跨站脚本攻击漏洞，攻击者利用该漏洞窃取基于cookie的身份验证，在受影响网站的上下文中执行任意脚本代码。

Severity

中

Patch Name

Juniper Junos J-Web跨站脚本攻击漏洞的补丁

Patch Description

Formal description

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10764&actp=search

Reference

http://www.securityfocus.com/bid/93529

Impacted products

Name
Juniper Networks JUNOS

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "93529"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-4923"
    }
  },
  "description": "Juniper Junos\u662f\u7f8e\u56fd\u77bb\u535a\u7f51\u7edc\uff08Juniper Networks\uff09\u516c\u53f8\u7684\u4e00\u5957\u4e13\u7528\u4e8e\u8be5\u516c\u53f8\u7684\u786c\u4ef6\u7cfb\u7edf\u7684\u7f51\u7edc\u64cd\u4f5c\u7cfb\u7edf\u3002\u8be5\u64cd\u4f5c\u7cfb\u7edf\u63d0\u4f9b\u4e86\u5b89\u5168\u7f16\u7a0b\u63a5\u53e3\u548cJunos SDK\u3002 \r\n\r\nJuniper Junos J-Web\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u653b\u51fb\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u5229\u7528\u8be5\u6f0f\u6d1e\u7a83\u53d6\u57fa\u4e8ecookie\u7684\u8eab\u4efd\u9a8c\u8bc1\uff0c\u5728\u53d7\u5f71\u54cd\u7f51\u7ad9\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u811a\u672c\u4ee3\u7801\u3002",
  "discovererName": "Juniper Networks",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a \r\nhttps://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10764\u0026actp=search",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-09601",
  "openTime": "2016-10-20",
  "patchDescription": "Juniper Junos\u662f\u7f8e\u56fd\u77bb\u535a\u7f51\u7edc\uff08Juniper Networks\uff09\u516c\u53f8\u7684\u4e00\u5957\u4e13\u7528\u4e8e\u8be5\u516c\u53f8\u7684\u786c\u4ef6\u7cfb\u7edf\u7684\u7f51\u7edc\u64cd\u4f5c\u7cfb\u7edf\u3002\u8be5\u64cd\u4f5c\u7cfb\u7edf\u63d0\u4f9b\u4e86\u5b89\u5168\u7f16\u7a0b\u63a5\u53e3\u548cJunos SDK\u3002 \r\n\r\nJuniper Junos J-Web\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u653b\u51fb\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u5229\u7528\u8be5\u6f0f\u6d1e\u7a83\u53d6\u57fa\u4e8ecookie\u7684\u8eab\u4efd\u9a8c\u8bc1\uff0c\u5728\u53d7\u5f71\u54cd\u7f51\u7ad9\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u811a\u672c\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Juniper Junos J-Web\u8de8\u7ad9\u811a\u672c\u653b\u51fb\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Juniper Networks JUNOS"
  },
  "referenceLink": "http://www.securityfocus.com/bid/93529",
  "serverity": "\u4e2d",
  "submitTime": "2016-10-14",
  "title": "Juniper Junos J-Web\u8de8\u7ad9\u811a\u672c\u653b\u51fb\u6f0f\u6d1e"
}

CVE-2016-4923 (GCVE-0-2016-4923)

Vulnerability from cvelistv5 – Published: 2017-10-13 17:00 – Updated: 2024-09-16 16:54

Title

Junos J-Web: Cross Site Scripting Vulnerability

Summary

Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. Affected releases are Juniper Networks Junos OS 11.4 prior to 11.4R13-S3; 12.1X44 prior to 12.1X44-D60; 12.1X46 prior to 12.1X46-D40; 12.1X47 prior to 12.1X47-D30; 12.3 prior to 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2X51 prior to 13.2X51-D39, 13.2X51-D40; 13.3 prior to 13.3R9; 14.1 prior to 14.1R6; 14.2 prior to 14.2R6; 15.1 prior to 15.1R3; 15.1X49 prior to 15.1X49-D20; 15.1X53 prior to 15.1X53-D57.

Severity

8 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE

Insufficient cross site scripting protection

Assigner

juniper mitre root

References

2 references

URL	Tags
https://kb.juniper.net/JSA10764	x_refsource_CONFIRM
http://www.securityfocus.com/bid/93529	vdb-entryx_refsource_BID

Impacted products

1 product

Vendor	Product	Version
Juniper Networks	Junos OS	Affected: 11.4 prior to 11.4R13-S3 Affected: 12.1X44 prior to 12.1X44-D60 Affected: 12.1X46 prior to 12.1X46-D40 Affected: 12.1X47 prior to 12.1X47-D30 Affected: 12.3 prior to 12.3R11 Affected: 12.3X48 prior to 12.3X48-D20 Affected: 13.2X51 prior to 13.2X51-D39, 13.2X51-D40 Affected: 13.3 prior to 13.3R9 Affected: 14.1 prior to 14.1R6 Affected: 14.2 prior to 14.2R6 Affected: 15.1 prior to 15.1R3 Affected: 15.1X49 prior to 15.1X49-D20 Affected: 15.1X53 prior to 15.1X53-D57

Date Public

2016-10-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:46:39.874Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA10764"
          },
          {
            "name": "93529",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93529"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "status": "affected",
              "version": "11.4 prior to 11.4R13-S3"
            },
            {
              "status": "affected",
              "version": "12.1X44 prior to 12.1X44-D60"
            },
            {
              "status": "affected",
              "version": "12.1X46 prior to 12.1X46-D40"
            },
            {
              "status": "affected",
              "version": "12.1X47 prior to 12.1X47-D30"
            },
            {
              "status": "affected",
              "version": "12.3 prior to 12.3R11"
            },
            {
              "status": "affected",
              "version": "12.3X48 prior to 12.3X48-D20"
            },
            {
              "status": "affected",
              "version": "13.2X51 prior to 13.2X51-D39, 13.2X51-D40"
            },
            {
              "status": "affected",
              "version": "13.3 prior to 13.3R9"
            },
            {
              "status": "affected",
              "version": "14.1 prior to 14.1R6"
            },
            {
              "status": "affected",
              "version": "14.2 prior to 14.2R6"
            },
            {
              "status": "affected",
              "version": "15.1 prior to 15.1R3"
            },
            {
              "status": "affected",
              "version": "15.1X49 prior to 15.1X49-D20"
            },
            {
              "status": "affected",
              "version": "15.1X53 prior to 15.1X53-D57"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "This issue is only applicable to devices where J-Web is enabled."
        }
      ],
      "datePublic": "2016-10-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. Affected releases are Juniper Networks Junos OS 11.4 prior to 11.4R13-S3; 12.1X44 prior to 12.1X44-D60; 12.1X46 prior to 12.1X46-D40; 12.1X47 prior to 12.1X47-D30; 12.3 prior to 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2X51 prior to 13.2X51-D39, 13.2X51-D40; 13.3 prior to 13.3R9; 14.1 prior to 14.1R6; 14.2 prior to 14.2R6; 15.1 prior to 15.1R3; 15.1X49 prior to 15.1X49-D20; 15.1X53 prior to 15.1X53-D57."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Insufficient cross site scripting protection",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-14T09:57:01.000Z",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.juniper.net/JSA10764"
        },
        {
          "name": "93529",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93529"
        }
      ],
      "title": "Junos J-Web: Cross Site Scripting Vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "sirt@juniper.net",
          "DATE_PUBLIC": "2016-10-12T09:00",
          "ID": "CVE-2016-4923",
          "STATE": "PUBLIC",
          "TITLE": "Junos J-Web: Cross Site Scripting Vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Junos OS",
                      "version": {
                        "version_data": [
                          {
                            "platform": "",
                            "version_value": "11.4 prior to 11.4R13-S3"
                          },
                          {
                            "platform": "",
                            "version_value": "12.1X44 prior to 12.1X44-D60"
                          },
                          {
                            "platform": "",
                            "version_value": "12.1X46 prior to 12.1X46-D40"
                          },
                          {
                            "platform": "",
                            "version_value": "12.1X47 prior to 12.1X47-D30"
                          },
                          {
                            "platform": "",
                            "version_value": "12.3 prior to 12.3R11"
                          },
                          {
                            "platform": "",
                            "version_value": "12.3X48 prior to 12.3X48-D20"
                          },
                          {
                            "platform": "",
                            "version_value": "13.2X51 prior to 13.2X51-D39, 13.2X51-D40"
                          },
                          {
                            "platform": "",
                            "version_value": "13.3 prior to 13.3R9"
                          },
                          {
                            "platform": "",
                            "version_value": "14.1 prior to 14.1R6"
                          },
                          {
                            "platform": "",
                            "version_value": "14.2 prior to 14.2R6"
                          },
                          {
                            "platform": "",
                            "version_value": "15.1 prior to 15.1R3"
                          },
                          {
                            "platform": "",
                            "version_value": "15.1X49 prior to 15.1X49-D20"
                          },
                          {
                            "platform": "",
                            "version_value": "15.1X53 prior to 15.1X53-D57"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Juniper Networks"
              }
            ]
          }
        },
        "configuration": [
          {
            "lang": "en",
            "value": "This issue is only applicable to devices where J-Web is enabled."
          }
        ],
        "credit": [],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. Affected releases are Juniper Networks Junos OS 11.4 prior to 11.4R13-S3; 12.1X44 prior to 12.1X44-D60; 12.1X46 prior to 12.1X46-D40; 12.1X47 prior to 12.1X47-D30; 12.3 prior to 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2X51 prior to 13.2X51-D39, 13.2X51-D40; 13.3 prior to 13.3R9; 14.1 prior to 14.1R6; 14.2 prior to 14.2R6; 15.1 prior to 15.1R3; 15.1X49 prior to 15.1X49-D20; 15.1X53 prior to 15.1X53-D57."
            }
          ]
        },
        "exploit": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.",
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Insufficient cross site scripting protection"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.juniper.net/JSA10764",
              "refsource": "CONFIRM",
              "url": "https://kb.juniper.net/JSA10764"
            },
            {
              "name": "93529",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93529"
            }
          ]
        },
        "solution": "The following software releases have been updated to resolve this specific issue: 11.4R13-S3, 12.1X44-D60, 12.1X46-D40, 12.1X47-D30, 12.3R11, 12.3X48-D20, 13.2X51-D39, 13.2X51-D40, 13.3R9, 14.1R6, 14.2R6, 15.1R3, 15.1X49-D20, 15.1X53-D57, 16.1R1, and all subsequent releases.\n\nThis issue is being tracked as PR 1085816 and is visible on the Customer Support website.",
        "work_around": []
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2016-4923",
    "datePublished": "2017-10-13T17:00:00.000Z",
    "dateReserved": "2016-05-18T00:00:00.000Z",
    "dateUpdated": "2024-09-16T16:54:14.922Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2016-09601

CVE-2016-4923 (GCVE-0-2016-4923)

Tags

Sightings

Nomenclature

Related by attack behaviour