漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to root
Vulnerability Description
A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell command injection. These shell commands are executed with root permissions and can be used to gain complete control of the system. This issue affects all JSI vLWC versions before 3.0.94.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
宽松定义的白名单
Vulnerability Title
Juniper Networks Support Insights Virtual Lightweight Collector 安全漏洞
Vulnerability Description
Juniper Networks Support Insights Virtual Lightweight Collector是美国瞻博网络（Juniper Networks）公司的一款网络设备遥测数据采集与运维分析辅助组件。 Juniper Networks Support Insights Virtual Lightweight Collector 3.0.94之前版本存在安全漏洞，该漏洞源于CLI菜单输入验证不足，可能导致本地高权限攻击者通过shell命令注入提升权限至root。
CVSS Information
N/A
Vulnerability Type
N/A