CVE-2019-0072: juniper networks sbr carrier Plaintext Storage of a Password
Vulnerability summary
CVE-2019-0072 is a medium (CVSS 5.6) Plaintext Storage of a Password vulnerability in juniper networks sbr carrier. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.9% of scored vulnerabilities.
Timeline
- 09-10-2019PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information. This issue affects: Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R13; 8.5.0 versions prior to 8.5.0R4.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NDiffers
EPSS trend
Probability
0.15%
Chance of exploitation in the next 30 days
Percentile
4%
Versus all other CVEs
30-day change
0.00 pp
From 0.15% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-256Plaintext Storage of a PasswordThe product stores a password in plaintext within resources such as memory or files.
- CWE-522Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Affected systems
Juniper1 product
- sbr_carrier8.4.1 | 8.4.1:r1 | 8.5.0 | 8.5.0:r1
Juniper networks1 product
- sbr carrier≥ 8.4.1, < 8.4.1R13 | ≥ 8.5.0, < 8.5.0R4
2 vendors · 2 products