On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation.Referenceshttp://www.securityfocus.com/bid/98759https://kb.juniper.net/JSA10770