CVE-2023-44201 (junos, junos_os_evolved)

An Incorrect Permission Assignment for Critical Resource vulnerability in a specific file of Juniper Networks Junos OS and Junos OS Evolved allows a local authenticated attacker to read configuration changes without having the permissions.

When a user with the respective permissions commits a configuration change, a specific file is created. That file is readable even by users with no permissions to access the configuration. This can lead to privilege escalation as the user can read the password hash when a …

attacker change configuration configuration changes critical cve file juniper juniper networks junos junos os local networks permission permissions resource vulnerability