CVE-2013-6618

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action.

• CWE-20

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10560Vendor Advisory
• http://secunia.com/advisories/54731Vendor Advisory
• http://www.exploit-db.com/exploits/29544
• http://www.securityfocus.com/bid/62305Exploit
• http://www.securitytracker.com/id/1029016
• http://www.senseofsecurity.com.au/advisories/SOS-13-003Exploit, URL Repurposed
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87011
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10560Vendor Advisory
• http://secunia.com/advisories/54731Vendor Advisory
• http://www.exploit-db.com/exploits/29544
• http://www.securityfocus.com/bid/62305Exploit
• http://www.securitytracker.com/id/1029016
• http://www.senseofsecurity.com.au/advisories/SOS-13-003Exploit, URL Repurposed
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87011

Published

Nov 5, 2013

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6612Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6613Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6614Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6615Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6616Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6617The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.…
• CVE-2013-6621Use-after-free vulnerability in Google Chrome before 31.0.16…
• CVE-2013-6622Use-after-free vulnerability in the HTMLMediaElement::didMov…
• CVE-2013-6623The SVG implementation in Blink, as used in Google Chrome be…
• CVE-2013-6624Use-after-free vulnerability in Google Chrome before 31.0.16…
• CVE-2013-6625Use-after-free vulnerability in core/dom/ContainerNode.cpp i…
• CVE-2013-6626The WebContentsImpl::AttachInterstitialPage function in cont…