Juniper Junos Space 1.2

Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors.

Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI

Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.