CVE-2013-4689
Description
J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts.
Risk Information
Base Score
8.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.09
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2013-4689 are fixed in junos 10.4r13 | NCM |
| Vulnerabilities CVE-2013-4685,CVE-2013-4689 are fixed in junos 11.4r7 | NCM |
| Vulnerabilities CVE-2013-4685,CVE-2013-4687,CVE-2013-4689 are fixed in junos 12.1r6 | NCM |
| Vulnerabilities CVE-2013-4689 are fixed in junos 12.2r3 | NCM |
| Vulnerabilities CVE-2013-4686,CVE-2013-4689 are fixed in junos 12.3r2 | NCM |
| Vulnerabilities CVE-2013-4689,CVE-2013-6014 are fixed in junos 13.1r3 | NCM |
| Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-4689) | NCM |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-1704488 | Security Update for junos 9.2r1 |
| PATCH-1704488 | Security Update for junos 9.2r1 |
| PATCH-1704488 | Security Update for junos 9.2r1 |
| PATCH-1704488 | Security Update for junos 9.2r1 |
| PATCH-1704488 | Security Update for junos 9.2r1 |
| PATCH-1704488 | Security Update for junos 9.2r1 |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234