J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS).
Advisories
Source ID Title
EUVD EUVD EUVD-2016-2360 J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS).
Fixes

Solution

No solution given by the vendor.


Workaround

Disable J-Web, or limit access to only trusted hosts which may not be compromised by cross-site attacks. For example, deploy jump hosts with no Internet access that use anti-scripting techniques to mitigate potential threats. Alternately, use a dedicated client and dedicated Web browser that is not used to access other sites.

References
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: juniper

Published:

Updated: 2024-09-16T23:22:09.228Z

Reserved: 2015-12-30T00:00:00

Link: CVE-2016-1261

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-10-13T17:29:00.190

Modified: 2025-04-20T01:37:25.860

Link: CVE-2016-1261

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.