Main
Vulnerability Database
Exploits
ID:9366 - Exploit for Input validation error in Juniper Junos OS - CVE-2023-36845
ID:9366 - Exploit for Input validation error in Juniper Junos OS - CVE-2023-36845
Published: September 29, 2023
Vulnerability identifier: #VU79688
Vulnerability risk: High
CVE-ID: CVE-2023-36845
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Juniper Junos OS
Juniper Junos OS
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to modify application behavior.
The vulnerability exists due to insufficient validation of user-supplied input in J-Web. A remote attacker can modify values of certain PHP environments variables and modify application's behavior.
Remediation
Install updates from vendor's website.