Detections
Analytics

Juniper Junos J-Web Component Unspecified CSRF (PSN-2012-01-474)

high Nessus Plugin ID 57638

Language:

Synopsis

The remote device has a cross-site request forgery vulnerability.

Description

According to its self-reported version number, the J-Web component of the remote Juniper device has a cross-site request forgery vulnerability. A remote attacker could exploit this by tricking a user into making a maliciously crafted request, resulting in a compromise of the device.

Solution

Apply the relevant Junos upgrade referenced in Juniper advisory PSN-2012-01-474.

See Also

http://www.nessus.org/u?dd94b3a6

Plugin Details

Severity: High

ID: 57638

File Name: juniper_psn-2012-01-474.nasl

Version: 1.6

Type: combined

Published: 1/23/2012

Updated: 8/10/2018

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/o:juniper:junos

Required KB Items: Host/Juniper/model, Host/Juniper/JUNOS/Version

Patch Publication Date: 1/11/2012

Vulnerability Publication Date: 1/11/2012