VULNERABILITY INTELLIGENCE
CVE-2020-1622
CVSS score5.5 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2020-04-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all versions of Junos OS Evolved prior to 19.1R1.
Weakness classification
- sirt@juniper.net: CWE-664
- nvd@nist.gov: CWE-532
Primary references
- sirt@juniper.net — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory