CVE:CVE-2023-28960
CNNVD:CNNVD-202304-1351
Juniper Networks Junos OS Evolved是美国瞻博网络（Juniper Networks）公司的Junos OS 的升级版系统。
Juniper Networks Junos OS Evolved存在安全漏洞，该漏洞源于关键资源权限分配不正确，攻击者利用该漏洞可以将潜在的恶意文件复制到本地系统上的现有 Docker 容器中，随后管理员可能会无意中启动 Docker 容器，导致恶意文件以 root 身份执行，以下产品和版本受到影响：Juniper Networks Junos OS Evolved 20.4R3-S5-EVO之前的20.4版本、21.2R3-EVO之前的21.2版本、21.3R3-EVO之前的21.3版本、21.4R2-EVO 之前的 21.4 版本。
solution:Upgrade juniper junos_os_evolved to a higher version than 20.4,20.4:r1,20.4:r1-s1,20.4:r1-s2,20.4:r2,20.4:r2-s1,20.4:r2-s2,20.4:r2-s3,20.4:r3,20.4:r3-s1,20.4:r3-s2,20.4:r3-s3,20.4:r3-s4,21.2,21.2:r1,21.2:r1-s1,21.2:r1-s2,21.2:r2,21.2:r2-s1,21.2:r2-s2,21.3,21.3:r1,21.3:r1-s1,21.3:r2,21.3:r2-s1,21.3:r2-s2,21.4,21.4:r1,21.4:r1-s1,21.4:r1-s2,and avoid the version 20.4,20.4:r1,20.4:r1-s1,20.4:r1-s2,20.4:r2,20.4:r2-s1,20.4:r2-s2,20.4:r2-s3,20.4:r3,20.4:r3-s1,20.4:r3-s2,20.4:r3-s3,20.4:r3-s4,21.2,21.2:r1,21.2:r1-s1,21.2:r1-s2,21.2:r2,21.2:r2-s1,21.2:r2-s2,21.3,21.3:r1,21.3:r1-s1,21.3:r2,21.3:r2-s1,21.3:r2-s2,21.4,21.4:r1,21.4:r1-s1,21.4:r1-s2