J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS).
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2016-2360 | J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS). |
Fixes
Solution
No solution given by the vendor.
Workaround
Disable J-Web, or limit access to only trusted hosts which may not be compromised by cross-site attacks. For example, deploy jump hosts with no Internet access that use anti-scripting techniques to mitigate potential threats. Alternately, use a dedicated client and dedicated Web browser that is not used to access other sites.
References
| Link | Providers |
|---|---|
| https://kb.juniper.net/JSA10723 |
|
History
No history.
Status: PUBLISHED
Assigner: juniper
Published:
Updated: 2024-09-16T23:22:09.228Z
Reserved: 2015-12-30T00:00:00
Link: CVE-2016-1261
No data.
Status : Deferred
Published: 2017-10-13T17:29:00.190
Modified: 2025-04-20T01:37:25.860
Link: CVE-2016-1261
No data.
OpenCVE Enrichment
No data.
EUVD