CVE-2014-3413 The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, which allows remote attackers to obtain sensitive information and consequently ob...
CriticalCVSS 9.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, which allows remote attackers to obtain sensitive information and consequently obtain administrative control by leveraging database access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos space | = 13.3-r1.1 | No fix listed |
| juniper junos space | = 13.3-r1.2 | No fix listed |
| juniper junos space | = 13.3-r1.3 | No fix listed |
| juniper junos space | = 13.3-r1.4 | No fix listed |
| juniper junos space | = 13.3-r1.5 | No fix listed |
| juniper junos space | = 13.3-r1.6 | No fix listed |
| juniper junos space | = 13.3-r1.7 | No fix listed |
References
- kb.juniper.net vendor-advisory
- www.tenable.com third-party-advisory