CVE-2021-0220

Name of the Vulnerable Software and Affected Versions: Junos Space Network Management Platform versions prior to 20.3R1

Description: The issue allows an attacker to obtain a copy of credentials managed by Junos Space if they can execute arbitrary code in the victim's browser or access cached contents. This could be achieved through methods like XSS. A successful attack may result in obtaining access to other servers connected to the Junos Space Management Platform.

Recommendations: For versions prior to 20.3R1, update to version 20.3R1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Junos Space UI and limiting the execution of arbitrary code in the victim's browser to minimize the risk of exploitation.