CVE-2018-0015

CVE-2018-0015 describes a critical vulnerability in Juniper AppFormix versions up to 2.7.3, prior to 2.11.3, and prior to 2.15.2. A malicious user with unrestricted access to the AppFormix application management platform can exploit an exposed Python debug console on the AppFormix Agent host to execute arbitrary system commands with root privileges. This vulnerability has a CVSSv3 score of 7.5 (High), indicating a high impact on confidentiality, integrity, and availability, with a network attack vector and high attack complexity requiring low privileges. While Juniper SIRT has observed this issue in a production network, there is no evidence of active malicious exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.