{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2013-10-17T23:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "62940", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/62940"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597"}, {"name": "55166", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/55166"}, {"name": "98325", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/98325"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2013-4689", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "62940", "refsource": "BID", "url": "http://www.securityfocus.com/bid/62940"}, {"name": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597", "refsource": "CONFIRM", "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597"}, {"name": "55166", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/55166"}, {"name": "98325", "refsource": "OSVDB", "url": "http://osvdb.org/98325"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T16:52:26.929Z"}, "title": "CVE Program Container", "references": [{"name": "62940", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/62940"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597"}, {"name": "55166", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/55166"}, {"name": "98325", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/98325"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2013-4689", "datePublished": "2013-10-17T23:00:00Z", "dateReserved": "2013-06-26T00:00:00Z", "dateUpdated": "2024-09-16T17:23:36.404Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*", "matchCriteriaId": "87B7BB4C-BF3D-4E88-9422-816CB5ECE523", "versionEndIncluding": "10.4", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "BD172DD1-A2A1-4A01-9490-D5EE34E82D81", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "59812A01-EED0-4D83-8837-462E51519B91", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:4.2:*:*:*:*:*:*:*", "matchCriteriaId": "2EC5D0F9-0769-4227-8E77-AC62811DCF4D", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:4.3:*:*:*:*:*:*:*", "matchCriteriaId": "944F82C3-FF55-4658-B620-CE84F414F8A1", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:4.4:*:*:*:*:*:*:*", "matchCriteriaId": "8D9AF7EE-F027-4F38-B33F-C9B4E53C8E38", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "C0F33B07-7036-4A13-9B54-D191D8085295", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:5.1:*:*:*:*:*:*:*", "matchCriteriaId": "FF54C9B6-F73B-421B-9B2C-A6F46A9C3618", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:5.2:*:*:*:*:*:*:*", "matchCriteriaId": "ABFFA914-40DA-44DF-9C51-CBC753659C58", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:5.3:*:*:*:*:*:*:*", "matchCriteriaId": "2A9EA5F0-08D8-476B-B3B9-009E5BB0A6B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:5.4:*:*:*:*:*:*:*", "matchCriteriaId": "D815C4FB-9D6B-4DDF-A60A-4BD721D3CB21", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:5.5:*:*:*:*:*:*:*", "matchCriteriaId": "658ED891-8E65-44F0-9797-07811AC5243F", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:5.6:*:*:*:*:*:*:*", "matchCriteriaId": "9D6D0229-9738-4472-B452-0D93EAEA7446", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:5.7:*:*:*:*:*:*:*", "matchCriteriaId": "24DD3017-5939-4EDC-8A9E-A673195B705E", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "FC1B9023-0D1E-456A-8ED5-AF63FA8A7F44", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:6.1:*:*:*:*:*:*:*", "matchCriteriaId": "78629980-A94C-4E13-86A4-C6CEC686B4B4", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:6.2:*:*:*:*:*:*:*", "matchCriteriaId": "0131C19D-4AF7-410A-A7C9-6AFD3494A743", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:6.3:*:*:*:*:*:*:*", "matchCriteriaId": "4EA66D3D-A91B-4573-B287-AB73DF17415C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:6.4:*:*:*:*:*:*:*", "matchCriteriaId": "B8089D28-839F-45CF-9247-969A9739E685", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "3195C856-8C0F-44DA-8DBB-ADD1854F0D66", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:7.1:*:*:*:*:*:*:*", "matchCriteriaId": "15480017-59ED-446C-9E9C-13D710ABC9E5", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:7.2:*:*:*:*:*:*:*", "matchCriteriaId": "EF1C2CC2-9EA4-4017-BFF7-399FEBA0DE9E", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:7.3:*:*:*:*:*:*:*", "matchCriteriaId": "8F443DB8-1E98-4D66-A75D-DCC4716218E8", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:7.4:*:*:*:*:*:*:*", "matchCriteriaId": "E51EBFBB-9236-436F-AC05-C7AFD9452A73", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:7.5:*:*:*:*:*:*:*", "matchCriteriaId": "851DD20A-9796-4B06-A9FF-C16D74310156", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:7.6:*:*:*:*:*:*:*", "matchCriteriaId": "38C56079-E4AC-4CE2-805D-AB893F82070C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "A0EE5FF2-A12F-41EF-9A3D-66B471288BF8", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "BB6086F9-431D-4A9D-BBFA-12A3A7FCE317", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:8.2:*:*:*:*:*:*:*", "matchCriteriaId": "5C8EFF72-7F38-4B55-B449-F22801D7C18B", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:8.3:*:*:*:*:*:*:*", "matchCriteriaId": "195D3916-4B92-4A49-8988-20F9B9E9FF34", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:8.4:*:*:*:*:*:*:*", "matchCriteriaId": "9AD4416F-E655-4D37-A28E-0623AA031423", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "378472AD-60F1-4A78-8256-DEF52ECB5602", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:9.1:*:*:*:*:*:*:*", "matchCriteriaId": "E2DB4226-A4B1-4647-88CA-74AAFA3AE022", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:9.2:*:*:*:*:*:*:*", "matchCriteriaId": "DD7CAA11-F8FE-4732-A649-B9DD751917F9", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:9.4:*:*:*:*:*:*:*", "matchCriteriaId": "3F474869-F2AD-4B2A-BF9D-66BAA8F8C3F8", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:9.5:*:*:*:*:*:*:*", "matchCriteriaId": "DA28B556-9507-44B0-8F52-7FB9CADC74DF", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:9.6:*:*:*:*:*:*:*", "matchCriteriaId": "135EA92C-6699-4686-8827-30E50C74BB0E", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:11.4:*:*:*:*:*:*:*", "matchCriteriaId": "41543223-0FA9-4CBE-8DEC-717CE5FFED79", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.1:*:*:*:*:*:*:*", "matchCriteriaId": "B40B8FD6-A597-4845-8E8E-63EFDF606006", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*", "matchCriteriaId": "1B307477-C5F2-4D98-AF4C-640D326164C7", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.1x45:*:*:*:*:*:*:*", "matchCriteriaId": "8E747970-4C27-4B46-9163-964252CB98F6", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.2:*:*:*:*:*:*:*", "matchCriteriaId": "5FB9541A-2570-459A-87D6-5341C67B8EC8", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*", "matchCriteriaId": "8E014A0D-0054-4EBA-BA1F-035B74BD822F", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:13.1:*:*:*:*:*:*:*", "matchCriteriaId": "71FB12AC-DB5A-444A-81E0-C0DDD06810EB", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts."}, {"lang": "es", "value": "J-Web in Juniper Junos anterior a la versi\u00f3n 10.4R13, 11.4 anterior a 11.4R7, 12.1R anterior a la versi\u00f3n 12.1R6, 12.1X44 anterior a 12.1X44-D15, 12.1x45 anterior a la versi\u00f3n 12.1X45-D10, 12.2 anterior a 12.2R3, 12.3 anterior a la versi\u00f3n 12.3R2, y 13.1 anterior a 13.1R3 permite a atacantes remotos evadir el mecanismo de protecci\u00f3n CSRF y secuestrar la autenticaci\u00f3n de administrador para peticiones que (1) crean nuevas cuentas de administraci\u00f3n o (2) tiene otros impactos no especificados."}], "id": "CVE-2013-4689", "lastModified": "2013-10-25T17:04:56.113", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2013-10-17T23:55:04.627", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/98325"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/55166"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/62940"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}