Juniper ATP: Hard coded credentials used in Web Collector
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 10epss 1.6%
exploitation probability
1.6%top 26% of all CVEs
observed exploitation
nono source reports it
Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Juniper Networks · Juniper ATPReferences
https://kb.juniper.net/JSA10918