CVE-2019-0032
Junos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.
02 Description
Junos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 0.44% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 38.2% of scored records. A rank, not a probability.
- NVD base score
- 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2019-04-10 20:13Z7 YR AGO
- Last updated
- 2024-09-16 23:21Z2 YR AGO
- Reserved
- 2018-10-11
- Assigning CNA
- juniper
- Record state
- PUBLISHED
- Severity
- Medium (CVSS 6.5)
- CNA CVSS vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- Weaknesses
- Data version
- 5.1
- Document digest
- 4da9d8a20da38a9ef2cf6038d83b9dcaf14b476c77cb01a52e0fe604239f01d9
05 Affected products
06 References
- kb.juniper.nethttps://kb.juniper.net/JSA10921
- kb.juniper.nethttps://kb.juniper.net/KB27572
- www.securityfocus.com107885http://www.securityfocus.com/bid/107885
07 Remediation
The following Junos Space Service Now and Service Insight releases have been updated to resolve this specific issue: 18.1R1, and all subsequent releases. These releases of Service Now and Service Insight require at least version 18.4R1 of Junos Space. No action is needed to resolve this issue other than upgrading. Existing log files will roll over as more actions are logged. To clear log files manually, login to the server as admin and issue the following commands: [root@space ~]# cd /var/log/jboss/servers/server1/ [root@space server1]# [root@space server1]# ls serviceNow.log* Should result in output similar to: serviceNow.log serviceNow.log.10 serviceNow.log.12 serviceNow.log.14 serviceNow.log.2 serviceNow.log.4 serviceNow.log.6 serviceNow.log.8 serviceNow.log.1 serviceNow.log.11 serviceNow.log.13 serviceNow.log.15 serviceNow.log.3 serviceNow.log.5 serviceNow.log.7 serviceNow.log.9 Next, [root@space server1]# >> serviceNow.log [root@space server1]# rm serviceNow.log.* If you wish to change the Organization password as a result of this advisory, you must contact JTAC for assistance to properly update the Organization.