Junos Space: Authenticated user able to delete devices without delete device privileges

A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.

N/A

N/A

Juniper Junos Space 访问控制错误漏洞

Juniper Junos Space是美国瞻博网络（Juniper Networks）公司的一套网络管理解决方案。该方案支持在设备和服务的整个生命周期内对其进行自动配置、监控和故障排除。 Juniper Junos Space 18.3R1中存在安全漏洞。攻击者可利用该漏洞从Junos Space数据库中删除设备。

N/A

N/A