CVE-2019-0004

5.5 mediumEPSS 0.3%

On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI interface. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2019-01-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

juniper:advanced_threat_prevention

References

https://kb.juniper.net/JSA10918
https://kb.juniper.net/JSA10918

Check your stack JSON