Vulnerabilities > Juniper > Ctpview > High

DATE CVE VULNERABILITY TITLE RISK
2021-10-19 CVE-2021-0296 Cleartext Transmission of Sensitive Information vulnerability in Juniper Ctpview 7.3/9.1
The Juniper Networks CTPView server is not enforcing HTTP Strict Transport Security (HSTS).
network
high complexity
juniper CWE-319
7.4
7.4
2009-03-30 CVE-2009-0115 Incorrect Permission Assignment for Critical Resource vulnerability in multiple products
The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon. 		7.8
7.8