CVE-2013-4689

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-17 · updated 2026-06-16
Weakness: CWE-352

Description

J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts.

Affected products

Juniper Junos OS: through 10.4; 4.0, 4.1, 4.2, 4.3, 4.4, 5.0 (+37)

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597
http://osvdb.org/98325
http://secunia.com/advisories/55166
http://www.securityfocus.com/bid/62940
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597
http://osvdb.org/98325
http://secunia.com/advisories/55166
http://www.securityfocus.com/bid/62940

Get alerted when CVE-2013-4689 or the next vulnerability affects your stack