Junos Space Multiple Vulnerabilities

Junos Space is prone to multiple vulnerabilities.

Junos Space is prone to multiple vulnerabilities: - Insufficient authentication vulnerability in Junos Space may allow remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication. (CVE-2016-4926) - Insufficient validation of SSH keys in Junos Space may allow man-in-the-middle (MITM) type of attacks while a Space device is communicating with managed devices. (CVE-2016-4927) - Cross site request forgery vulnerability in Junos Space may allow remote attackers to perform certain administrative actions on Junos Space. (CVE-2016-4928) - Command injection vulnerability in Junos Space may allow unprivileged users to execute code as root user on the device. (CVE-2016-4929) - Cross site scripting vulnerability may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space. (CVE-2016-4930) - XML entity injection vulnerability may allow unprivileged users to cause a denial of service condition. (CVE-2016-4931)

This issue can affect any product or platform running Junos Space before 15.2R2.

Checks if a vulnerable version is present on the target host.

Update to version 15.2R2 or later.