CVE-2019-0016 — Junos Space: Authenticated user able to delete devices without delete device privileges
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from anot…
Published: 2019-01-15 · CVSS: 6.5 · CVSS 3.0
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7