Vulnerability · Published Oct 16, 2020 · Assigned by juniper

CVE-2020-1669Junos OS: NFX350: Password hashes stored in world-readable format

Medium 6.3

In plain English

A medium-severity security flaw in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.3%top 83.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The Juniper Device Manager (JDM) container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes in the world-readable file /etc/passwd. This is not a security best current practice as it can allow an attacker with access to the local filesystem the ability to brute-force decrypt password hashes stored on the system. This issue affects Juniper Networks Junos OS on NFX350: 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2.

Affected products (as reported)

Vendor	Product	Versions
Juniper Networks	Junos OS	19.4 – before 19.4R320.1 – before 20.1R1-S4, 20.1R2

Weakness: CWE-256 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

References

https://kb.juniper.net/JSA11066 x_refsource_CONFIRM