« Volver al listado

CVE-2018-0010

Estado: ModificadaMedia (6.5)—

A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Juniper — Junos Space

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-0010",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-01-10T22:29:01.290",
  "references": [
    {
      "url": "https://kb.juniper.net/JSA10840",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/JSA10840",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en Juniper Networks Junos Space Security Director permite a un usuario que no tiene acceso SSH a un dispositivo reutilizar la URL que se había creado para otro usuario para sí tener acceso SSH. Las distribuciones afectadas son todas las versiones de Junos Space Security Director anteriores a la 17.2R1."
    }
  ],
  "lastModified": "2026-06-17T01:29:22.853",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:13.3:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3690DD20-F4FF-4388-899E-884D60052199"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:13.3:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "642062E4-FCD1-4C96-9832-8B65D1D327D8"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:14.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA50737C-5924-490D-8A1C-C7913264D458"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:14.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6EB0159B-4D22-40E1-AD55-17D7A8AA4CAA"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:14.1:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C157A9EB-482F-4060-9A60-0D149D656665"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:15.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC5AA529-494F-4297-88FE-4C58B8FCA8F1"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:15.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C01B9DB-ADFF-4652-8040-572715370BDF"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:15.1:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE27435E-F321-4CD6-AB9E-AF2F50057A03"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:15.1:r4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3716BA1C-FFDF-4939-8AE6-68BFB06CDD53"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:15.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F319D4E-938C-44AF-868A-FBFF077D6139"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:15.2:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FE562A7-779A-4B7C-9A1E-3EF141D798B5"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:16.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "882C4D7A-293C-4587-84B1-822F63D53D2F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:16.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A98BA3F-35BD-4C8D-80B4-B85C3B32F5AD"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:16.1:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE3823E7-6A1D-4645-94C5-01EBB2392B69"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:17.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DFF54CC-E24F-42B4-B908-AECD1139146B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:17.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E80FD6E-A2E7-4B8C-BFC8-D9B0F32245C7"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}