CVE-2018-0046

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 18.2R1

Description A reflected cross-site scripting issue in OpenNMS, included with Juniper Networks Junos Space, may allow the stealing of sensitive information or session credentials from Junos Space administrators or perform administrative actions. The issue is caused by insufficient protection of the web page structure, which can be exploited by a remote attacker to disclose protected information or perform actions on behalf of an administrator.

Recommendations For Juniper Networks Junos Space versions prior to 18.2R1, update to version 18.2R1 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected web pages or disabling the vulnerable OpenNMS component until a patch is available.