CVE-2016-1261

Junos: vulnerabilities in J-Web (CVE-2016-1261)

Published Oct 13, 2017 CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Description
J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS).

Remediation

Vendor Workaround

Disable J-Web, or limit access to only trusted hosts which may not be compromised by cross-site attacks. For example, deploy jump hosts with no Internet access that use anti-scripting techniques to mitigate potential threats. Alternately, use a dedicated client and dedicated Web browser that is not used to access other sites.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2016-2360 J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS).
References
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
juniper
Published
Updated
Sep 16, 2024, 11:22 PM
Reserved
Dec 30, 2015, 12:00 AM
Status
Modified
Published
Oct 13, 2017, 5:29 PM
Modified
Jun 17, 2026, 12:41 AM