Vulnerability Database

314,373

Total vulnerabilities in the database

CVE-2020-1669

The Juniper Device Manager (JDM) container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes in the world-readable file /etc/passwd. This is not a security best current practice as it can allow an attacker with access to the local filesystem the ability to brute-force decrypt password hashes stored on the system. This issue affects Juniper Networks Junos OS on NFX350: 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2.

  • Published: Oct 16, 2020
  • Updated: Nov 16, 2025
  • CVE: CVE-2020-1669
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.3
  • AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
juniper / junos 19.4-r1-s1 19.4-r1-s1.x
juniper / junos 19.4-r1-s2 19.4-r1-s2.x
juniper / junos 19.4-r1 19.4-r1.x
juniper / junos 19.4-r2 19.4-r2.x
juniper / junos 20.1-r1 20.1-r1.x
juniper / junos 20.1-r1-s1 20.1-r1-s1.x
juniper / junos 20.1-r1-s2 20.1-r1-s2.x
juniper / junos 20.1-r1-s3 20.1-r1-s3.x