CVE-2019-0062 is a session fixation vulnerability in J-Web on Junos OS, affecting various versions across EX, SRX, and other Juniper Networks devices. An attacker could leverage social engineering to fix and hijack an administrator's web session, potentially gaining full administrative access. With a CVSS score of 8.8 (HIGH), this vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed on the CISA KEV catalog, indicating no active exploitation. Community discussion and media coverage are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 12.3, < 12.3R12-S15CPE match | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | ||
>= 12.3X48, < 12.3X48-D85CPE match | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | ||
>= 15.1X49, < 15.1X49-D180CPE match | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | ||
>= 14.1X53, < 14.1X53-D51CPE match | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | ||
>= 15.1X53, < 15.1X53-D238CPE match | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.