---
cve: "CVE-2019-0022"
severity: "CRITICAL"
cvss: 10.0
epss: "1.1%"
vendor: "Juniper Networks"
kev: false
exploited: false
published: "2019-01-15 21:29:01"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-09-03T04:26:10+02:00"
---

# CVE-2019-0022

> 10.0 CRITICAL

## Beschreibung

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3.

## CVSS-Vektor

```
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Verändert | bad |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://kb.juniper.net/JSA10918>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2019-0022) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_