CVE-2018-0010

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2018-01-10T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-01-10T21:57:01.000Z", "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://kb.juniper.net/JSA10840"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "sirt@juniper.net", "ID": "CVE-2018-0010", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://kb.juniper.net/JSA10840", "refsource": "CONFIRM", "url": "https://kb.juniper.net/JSA10840"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T03:14:16.177Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://kb.juniper.net/JSA10840"}]}]}, "cveMetadata": {"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "assignerShortName": "juniper", "cveId": "CVE-2018-0010", "datePublished": "2018-01-10T22:00:00.000Z", "dateReserved": "2017-11-16T00:00:00.000Z", "dateUpdated": "2024-08-05T03:14:16.177Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "sirt@juniper.net"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos_space:13.3:r1:*:*:*:*:*:*", "matchCriteriaId": "3690DD20-F4FF-4388-899E-884D60052199", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:13.3:r2:*:*:*:*:*:*", "matchCriteriaId": "642062E4-FCD1-4C96-9832-8B65D1D327D8", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:14.1:r1:*:*:*:*:*:*", "matchCriteriaId": "BA50737C-5924-490D-8A1C-C7913264D458", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:14.1:r2:*:*:*:*:*:*", "matchCriteriaId": "6EB0159B-4D22-40E1-AD55-17D7A8AA4CAA", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:14.1:r3:*:*:*:*:*:*", "matchCriteriaId": "C157A9EB-482F-4060-9A60-0D149D656665", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:15.1:r1:*:*:*:*:*:*", "matchCriteriaId": "CC5AA529-494F-4297-88FE-4C58B8FCA8F1", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:15.1:r2:*:*:*:*:*:*", "matchCriteriaId": "0C01B9DB-ADFF-4652-8040-572715370BDF", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:15.1:r3:*:*:*:*:*:*", "matchCriteriaId": "DE27435E-F321-4CD6-AB9E-AF2F50057A03", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:15.1:r4:*:*:*:*:*:*", "matchCriteriaId": "3716BA1C-FFDF-4939-8AE6-68BFB06CDD53", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:15.2:r1:*:*:*:*:*:*", "matchCriteriaId": "0F319D4E-938C-44AF-868A-FBFF077D6139", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:15.2:r2:*:*:*:*:*:*", "matchCriteriaId": "0FE562A7-779A-4B7C-9A1E-3EF141D798B5", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:16.1:r1:*:*:*:*:*:*", "matchCriteriaId": "882C4D7A-293C-4587-84B1-822F63D53D2F", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:16.1:r2:*:*:*:*:*:*", "matchCriteriaId": "4A98BA3F-35BD-4C8D-80B4-B85C3B32F5AD", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:16.1:r3:*:*:*:*:*:*", "matchCriteriaId": "FE3823E7-6A1D-4645-94C5-01EBB2392B69", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:17.1:r1:*:*:*:*:*:*", "matchCriteriaId": "3DFF54CC-E24F-42B4-B908-AECD1139146B", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos_space:17.2:r1:*:*:*:*:*:*", "matchCriteriaId": "2E80FD6E-A2E7-4B8C-BFC8-D9B0F32245C7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1."}, {"lang": "es", "value": "Una vulnerabilidad en Juniper Networks Junos Space Security Director permite a un usuario que no tiene acceso SSH a un dispositivo reutilizar la URL que se hab\u00eda creado para otro usuario para s\u00ed tener acceso SSH. Las distribuciones afectadas son todas las versiones de Junos Space Security Director anteriores a la 17.2R1."}], "id": "CVE-2018-0010", "lastModified": "2026-06-17T01:29:22.853", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-01-10T22:29:01.290", "references": [{"source": "sirt@juniper.net", "tags": ["Patch", "Vendor Advisory"], "url": "https://kb.juniper.net/JSA10840"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://kb.juniper.net/JSA10840"}], "sourceIdentifier": "sirt@juniper.net", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}