CVE-2020-1622

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.1R1

Description: The issue is related to insufficient protection of registration data in the EvoSharedObjStore component of the Junos OS Evolved operating system. A local, authenticated user with shell access can exploit this to obtain the hashed values of login passwords and shared secrets.

Recommendations: For versions prior to 19.1R1, update to version 19.1R1 or later to resolve the issue. As a temporary workaround, consider restricting access to the EvoSharedObjStore component to minimize the risk of exploitation.