CVE-2016-4926
critical
CVSS v3
9.8
CVSS v2
7.5
VIR risk
9.8
Description
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication.
Predictions
Exploit likelihood
97%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: sirt@juniper.net — https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760
References
CWEs
CWE-287
Verify integrity in audit chain (admin only). AS-IS.