CVE-2019-0032: Junos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.

Security readout for executives and security teams

This issue exposed Organization login credentials by writing them in plaintext to log files in Juniper Service Now and Service Insight. An attacker would already need local authenticated access and the ability to read those logs, but the exposed credentials could let them log in to the Organization. Exposure is limited to organizations running Juniper Networks Service Insight or Service Now versions from 15.1R1 before 18.1R1. Risk is higher where local accounts or log-read access are broadly granted, logs are centrally collected, or retained logs still contain exposed credentials. Treat this as a moderate-priority credential exposure issue. It is not described as remotely exploitable, but affected systems may manage sensitive operational workflows. Prioritize remediation where many users can access logs or where logs are exported to shared platforms. Mitigation focus: Review Juniper advisory JSA10921 for the vendor-approved fix path.; Upgrade affected Service Now and Service Insight deployments beyond the vulnerable range.; Restrict local and log-file access to only required administrators..

Prepared

May 24, 2026, 20:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.