CVE-2018-0023: Insecure File and Directory Permissions in jsnapy
Summary
CVE-2018-0023: JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. Affects jsnapy versions < 1.3.0. Fixed in 1.3.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
jsnapy is an open source Python version of Junos Snapshot Administrator developed by Juniper. It is an automation tool used for managing Junos devices. The tool allows users to create and manage snapshots of device configurations. jsnapy is available on GitHub. The default configuration and sample files of jsnapy versions prior to 1.3.0 have insecure file and directory permissions, making them world writable. This vulnerability allows unprivileged local users to modify these files, potentially inserting unauthorized operations. It is important to note that this issue only affects users who downloaded and installed jsnapy from GitHub.
Vulnerability Detail
The vulnerability in jsnapy arises from the insecure file and directory permissions set for the default configuration and sample files. These files are created with world-writable permissions, which means any user on the system can modify them. This can lead to unauthorized changes to the files, potentially compromising the intended functionality of the tool. An attacker with local access to the system could exploit this vulnerability to insert malicious operations into the files, bypassing the intended security measures. It is crucial for users of jsnapy versions prior to 1.3.0 to address this vulnerability to prevent unauthorized modifications and maintain the integrity of their configurations.
How To Fix
Minimum fixed version
1.3.0
This is the first release that contains the fix.
pip install --upgrade "jsnapy==1.3.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Users are advised to update to the latest version of jsnapy as soon as possible.
Conclusion
In summary, the jsnapy automation tool versions prior to 1.3.0 have insecure file and directory permissions, allowing unprivileged local users to modify the default configuration and sample files. This vulnerability can lead to unauthorized operations being inserted into the files. Users should update to jsnapy version 1.3.0 or later to address this issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for jsnapy →
FAQ
jsnapy is an open source Python version of Junos Snapshot Administrator developed by Juniper. It is an automation tool used for managing Junos devices.
This vulnerability allows unprivileged local users to modify the default configuration and sample files of jsnapy, potentially inserting unauthorized operations.
This vulnerability affects users who downloaded and installed jsnapy from GitHub, specifically versions prior to 1.3.0.
To fix this vulnerability, update to jsnapy version 1.3.0 or later. Ensure that the file permissions are no longer world writable.
There is no specific workaround mentioned for this vulnerability. Updating to the latest version is the recommended solution.
