CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Permissions Privileges and Access Controls
Summary: juniper junos os before 12.1x44-d50, 12.1x46 before 12.1x46-d35, 12.1x47 before 12.1x47-d25, 12.3 before 12.3r9, 12.3x48 before 12.3x48-d15, 13.2 before 13.2r7, 13.2x51 before 13.2x51-d35, 13.3 before 13.3r6, 14.1 before 14.1r5, 14.1x50 before 14.1x50-d105, 14.1x51 before 14.1x51-d70, 14.1x53 before 14.1x53-d25, 14.1x55 before 14.1x55-d20, 14.2 before 14.2r1, 15.1 before 15.1f2 or 15.1r1, and 15.1x49 before 15.1x49-d10 does not require a password for the root user when pam.conf is "corrupted," which allows local users to gain root privileges by modifying the file.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-10-19
Last Modified Date: 2015-10-20