CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Permissions Privileges and Access Controls
Summary: race condition in the op command in juniper junos os before 12.1x44-d55, 12.1x46 before 12.1x46-d40, 12.1x47 before 12.1x47-d25, 12.3 before 12.3r11, 12.3x48 before 12.3x48-d20, 12.3x50 before 12.3x50-d50, 13.2 before 13.2r8, 13.2x51 before 13.2x51-d39, 13.2x52 before 13.2x52-d30, 13.3 before 13.3r7, 14.1 before 14.1r6, 14.1x53 before 14.1x53-d30, 14.2 before 14.2r4, 15.1 before 15.1f2 or 15.1r2, 15.1x49 before 15.1x49-d10 or 15.1x49-d20, and 16.1 before 16.1r1 allows remote authenticated users to gain privileges via the url option.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2016-04-15
Last Modified Date: 2016-12-03