CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1626 – Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets
https://notcve.org/view.php?id=CVE-2020-1626
A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting in a pfemand process crash. The pfemand process is responsible for packet forwarding on the device. By continuously sending the packet flood, an attacker can repeatedly crash the pfemand process causing a sustained Denial of Service. This issue can only be triggered by traffic sent to the device. Transit traffic does not cause this issue. • https://kb.juniper.net/JSA11005 https://tools.ietf.org/html/rfc6192 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1624 – Junos OS Evolved: objmon logs may leak sensitive information
https://notcve.org/view.php?id=CVE-2020-1624
A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1. Un usuario local autenticado con shell puede obtener los valores de las contraseñas de inicio de sesión del hash y los secretos compartidos por medio de archivos de configuración objmon sin procesar. Este problema afecta a todas las versiones de Junos OS Evolved anteriores a 19.1R1. • https://kb.juniper.net/JSA11003 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1623 – Junos OS Evolved: ev.ops file may leak sensitive information
https://notcve.org/view.php?id=CVE-2020-1623
A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1. Un usuario local autenticado con shell puede visualizar información de configuración confidencial por medio del archivo de configuración ev.ops. Este problema afecta a todas las versiones de Junos OS Evolved anteriores a 19.2R1. • https://kb.juniper.net/JSA11003 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1622 – Junos OS Evolved: EvoSharedObjStore may leak sensitive information
https://notcve.org/view.php?id=CVE-2020-1622
A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all versions of Junos OS Evolved prior to 19.1R1. Un usuario local autenticado con shell puede obtener los valores de las contraseñas de inicio de sesión del hash y los secretos compartidos por medio de EvoSharedObjStore. Este problema afecta a todas las versiones de Junos OS Evolved anteriores a 19.1R1. • https://kb.juniper.net/JSA11003 • CWE-532: Insertion of Sensitive Information into Log File CWE-664: Improper Control of a Resource Through its Lifetime •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1621 – Junos OS Evolved: Configd leaks hashes via stream and is world readable
https://notcve.org/view.php?id=CVE-2020-1621
A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1. Un usuario local autenticado con shell puede obtener los valores de las contraseñas de inicio de sesión del hash por medio de trazas del configd. Este problema afecta a todas las versiones de Junos OS Evolved anteriores a 19.3R1. • https://kb.juniper.net/JSA11003 • CWE-532: Insertion of Sensitive Information into Log File CWE-664: Improper Control of a Resource Through its Lifetime •