We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-39532

Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user



Description

An Insertion of Sensitive Information into Log File vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to access sensitive information. When another user performs a specific operation, sensitive information is stored as plain text in a specific log file, so that a high-privileged attacker has access to this information. This issue affects: Junos OS: * All versions before 21.2R3-S9; * 21.4 versions before 21.4R3-S9; * 22.2 versions before 22.2R2-S1, 22.2R3; * 22.3 versions before 22.3R1-S1, 22.3R2; Junos OS Evolved: * All versions before before 22.1R3-EVO; * 22.2-EVO versions before 22.2R2-S1-EVO, 22.2R3-EVO; * 22.3-EVO versions before 22.3R1-S1-EVO, 22.3R2-EVO.

Reserved 2024-06-25 | Published 2024-07-11 | Updated 2025-01-07 | Assigner juniper


MEDIUM: 6.3CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

Problem types

CWE-532 Insertion of Sensitive Information into Log File

Product status

Default status
unaffected

Any version before 21.2R3-S9
affected

21.4 before 21.4R3-S9
affected

22.2 before 22.2R2-S1, 22.2R3
affected

22.3 before 22.3R1-S1, 22.3R2
affected

Default status
unaffected

Any version before 22.1R3-EVO
affected

22.2-EVO before 22.2R2-S1-EVO, 22.2R3-EVO
affected

22.3-EVO before 22.3R1-S1-EVO, 22.3R2-EVO
affected

References

supportportal.juniper.net/JSA82992 vendor-advisory

cve.org (CVE-2024-39532)

nvd.nist.gov (CVE-2024-39532)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2024-39532

Support options

Helpdesk Chat, Email, Knowledgebase