CVE-2020-1669

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on NFX350 versions prior to 19.4R3 Juniper Networks Junos OS on NFX350 versions prior to 20.1R1-S4 Juniper Networks Junos OS on NFX350 versions prior to 20.1R2

Description The issue concerns the storage of password hashes in a world-readable file, /etc/passwd, within the Juniper Device Manager container. This practice allows an attacker with local filesystem access to potentially brute-force decrypt the stored password hashes.

Recommendations For versions prior to 19.4R3, update to 19.4R3 or later. For versions prior to 20.1R1-S4, update to 20.1R1-S4 or later. For versions prior to 20.1R2, update to 20.1R2 or later.