CVE-2025-30654
EUVD-2025-1051609.04.2025, 20:15
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged, authenticated attacker with access to the CLI to access sensitive information. Through the execution of a specific show mgd command, a user with limited permissions (e.g., a low-privileged login class user) can access sensitive information such as hashed passwords, that can be used to further impact the system. This issue affects Junos OS: * All versions before 21.4R3-S10, * from 22.2 before 22.2R3-S5, * from 22.4 before 22.4R3-S5, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2-S3. Junos OS Evolved: * All versions before 21.4R3-S10-EVO, * from 22.2-EVO before 22.2R3-S6-EVO, * from 22.4-EVO before 22.4R3-S5-EVO, * from 23.2-EVO before 23.2R2-S3-EVO, * from 23.4-EVO before 23.4R2-S3-EVO.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| juniper | junos | 𝑥 < 21.4 |
| juniper | junos | 21.4 |
| juniper | junos | 21.4:r1 |
| juniper | junos | 21.4:r1-s1 |
| juniper | junos | 21.4:r1-s2 |
| juniper | junos | 21.4:r2 |
| juniper | junos | 21.4:r2-s1 |
| juniper | junos | 21.4:r2-s2 |
| juniper | junos | 21.4:r3 |
| juniper | junos | 21.4:r3-s1 |
| juniper | junos | 21.4:r3-s2 |
| juniper | junos | 21.4:r3-s3 |
| juniper | junos | 21.4:r3-s4 |
| juniper | junos | 21.4:r3-s5 |
| juniper | junos | 21.4:r3-s6 |
| juniper | junos | 21.4:r3-s7 |
| juniper | junos | 21.4:r3-s8 |
| juniper | junos | 21.4:r3-s9 |
| juniper | junos | 22.2 |
| juniper | junos | 22.2:r1 |
| juniper | junos | 22.2:r1-s1 |
| juniper | junos | 22.2:r1-s2 |
| juniper | junos | 22.2:r2 |
| juniper | junos | 22.2:r2-s1 |
| juniper | junos | 22.2:r2-s2 |
| juniper | junos | 22.2:r3 |
| juniper | junos | 22.2:r3-s1 |
| juniper | junos | 22.2:r3-s2 |
| juniper | junos | 22.2:r3-s3 |
| juniper | junos | 22.2:r3-s4 |
| juniper | junos | 22.4 |
| juniper | junos | 22.4:r1 |
| juniper | junos | 22.4:r1-s1 |
| juniper | junos | 22.4:r1-s2 |
| juniper | junos | 22.4:r2 |
| juniper | junos | 22.4:r2-s1 |
| juniper | junos | 22.4:r2-s2 |
| juniper | junos | 22.4:r3 |
| juniper | junos | 22.4:r3-s1 |
| juniper | junos | 22.4:r3-s2 |
| juniper | junos | 22.4:r3-s3 |
| juniper | junos | 22.4:r3-s4 |
| juniper | junos | 23.2 |
| juniper | junos | 23.2:r1 |
| juniper | junos | 23.2:r1-s1 |
| juniper | junos | 23.2:r1-s2 |
| juniper | junos | 23.2:r2 |
| juniper | junos | 23.2:r2-s1 |
| juniper | junos | 23.2:r2-s2 |
| juniper | junos | 23.4 |
| juniper | junos | 23.4:r1 |
| juniper | junos | 23.4:r1-s1 |
| juniper | junos | 23.4:r1-s2 |
| juniper | junos | 23.4:r2 |
| juniper | junos | 23.4:r2-s1 |
| juniper | junos | 23.4:r2-s2 |
| juniper | junos_os_evolved | 𝑥 < 21.4 |
| juniper | junos_os_evolved | 21.4 |
| juniper | junos_os_evolved | 21.4:r1 |
| juniper | junos_os_evolved | 21.4:r1-s1 |
| juniper | junos_os_evolved | 21.4:r1-s2 |
| juniper | junos_os_evolved | 21.4:r2 |
| juniper | junos_os_evolved | 21.4:r2-s1 |
| juniper | junos_os_evolved | 21.4:r2-s2 |
| juniper | junos_os_evolved | 21.4:r3 |
| juniper | junos_os_evolved | 21.4:r3-s1 |
| juniper | junos_os_evolved | 21.4:r3-s2 |
| juniper | junos_os_evolved | 21.4:r3-s3 |
| juniper | junos_os_evolved | 21.4:r3-s4 |
| juniper | junos_os_evolved | 21.4:r3-s5 |
| juniper | junos_os_evolved | 21.4:r3-s6 |
| juniper | junos_os_evolved | 21.4:r3-s7 |
| juniper | junos_os_evolved | 21.4:r3-s8 |
| juniper | junos_os_evolved | 21.4:r3-s9 |
| juniper | junos_os_evolved | 22.2 |
| juniper | junos_os_evolved | 22.2:r1 |
| juniper | junos_os_evolved | 22.2:r1-s1 |
| juniper | junos_os_evolved | 22.2:r1-s2 |
| juniper | junos_os_evolved | 22.2:r2 |
| juniper | junos_os_evolved | 22.2:r2-s1 |
| juniper | junos_os_evolved | 22.2:r2-s2 |
| juniper | junos_os_evolved | 22.2:r3 |
| juniper | junos_os_evolved | 22.2:r3-s1 |
| juniper | junos_os_evolved | 22.2:r3-s2 |
| juniper | junos_os_evolved | 22.2:r3-s3 |
| juniper | junos_os_evolved | 22.2:r3-s4 |
| juniper | junos_os_evolved | 22.2:r3-s5 |
| juniper | junos_os_evolved | 22.4 |
| juniper | junos_os_evolved | 22.4:r1 |
| juniper | junos_os_evolved | 22.4:r1-s1 |
| juniper | junos_os_evolved | 22.4:r1-s2 |
| juniper | junos_os_evolved | 22.4:r2 |
| juniper | junos_os_evolved | 22.4:r2-s1 |
| juniper | junos_os_evolved | 22.4:r2-s2 |
| juniper | junos_os_evolved | 22.4:r3 |
| juniper | junos_os_evolved | 22.4:r3-s1 |
| juniper | junos_os_evolved | 22.4:r3-s2 |
| juniper | junos_os_evolved | 22.4:r3-s3 |
| juniper | junos_os_evolved | 22.4:r3-s4 |
| juniper | junos_os_evolved | 23.2 |
| juniper | junos_os_evolved | 23.2:r1 |
| juniper | junos_os_evolved | 23.2:r1-s1 |
| juniper | junos_os_evolved | 23.2:r1-s2 |
| juniper | junos_os_evolved | 23.2:r2 |
| juniper | junos_os_evolved | 23.2:r2-s1 |
| juniper | junos_os_evolved | 23.2:r2-s2 |
| juniper | junos_os_evolved | 23.4 |
| juniper | junos_os_evolved | 23.4:r1 |
| juniper | junos_os_evolved | 23.4:r1-s1 |
| juniper | junos_os_evolved | 23.4:r1-s2 |
| juniper | junos_os_evolved | 23.4:r2 |
| juniper | junos_os_evolved | 23.4:r2-s1 |
| juniper | junos_os_evolved | 23.4:r2-s2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration