CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 5.5
CWE Name:  Improper Access Control
Summary: a malicious authenticated user may be able to delete a device from the junos space database without the necessary privileges through crafted ajax interactions obtained from another legitimate delete action performed by another administrative user. affected releases are juniper networks junos space versions prior to 18.3r1.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/PARTIAL
Published Date: 2019-01-15
Last Modified Date: 2019-10-09