CVE-2013-5096

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-08-16 · updated 2026-06-16
Weakness: CWE-264

Description

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804.

Affected products

Juniper Networks Junos Space: 11.1, 11.2, 11.3, 11.4, 12.1, 12.2 (+1)
Juniper Junos Space Ja1500 Appliance: all versions
Juniper Junos Space Virtual Appliance: all versions

References

http://kb.juniper.net/JSA10585
http://www.securityfocus.com/bid/61794
http://www.securitytracker.com/id/1028923
http://kb.juniper.net/JSA10585
http://www.securityfocus.com/bid/61794
http://www.securitytracker.com/id/1028923

Get alerted when CVE-2013-5096 or the next vulnerability affects your stack