CVE-2018-0023

JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configuration and sample files of JSNAPy automation tool versions prior to 1.3.0 are created world writable. This insecure file and directory permission allows unprivileged local users to alter the files under this directory including inserting operations not intended by the package maintainer, system administrator, or other users. This issue only affects users who downloaded and installed JSNAPy from github.

• CWE-276

• http://www.securityfocus.com/bid/103745Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10856Mitigation, Vendor Advisory
• http://www.securityfocus.com/bid/103745Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10856Mitigation, Vendor Advisory

Published

Apr 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0017A vulnerability in the Network Address Translation - Protoco…7.5
• CVE-2018-0018On SRX Series devices during compilation of IDP policies, an…7.5
• CVE-2018-0019A vulnerability in Junos OS SNMP MIB-II subagent daemon (mib…5.3
• CVE-2018-0020Junos OS may be impacted by the receipt of a malformed BGP U…7.5
• CVE-2018-0021If all 64 digits of the connectivity association name (CKN) …8.8
• CVE-2018-0022A Junos device with VPLS routing-instances configured on one…7.5
• CVE-2018-0024An Improper Privilege Management vulnerability in a shell se…7.8
• CVE-2018-0025When an SRX Series device is configured to use HTTP/HTTPS pa…6.1
• CVE-2018-0026After Junos OS device reboot or upgrade, the stateless firew…4.7
• CVE-2018-0027Receipt of a crafted or malformed RSVP PATH message may caus…7.5
• CVE-2018-0029While experiencing a broadcast storm, placing the fxp0 inter…5.7
• CVE-2018-0030Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FP…7.5