CVE-2020-1621

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.3R1

Description: The issue is related to insufficient protection of registration data in the configd Trace Handler component of the JunOS Evolved operating system. It allows a local, authenticated user with shell access to obtain the hashed values of login passwords via configd traces.

Recommendations: For versions prior to 19.3R1, update to version 19.3R1 or later to resolve the issue. As a temporary workaround, consider restricting access to the configd traces to minimize the risk of exploitation.