JSA10648 can be true regarding the public facing interfaces with the world, but is not true regarding one administrative interface.
I've an open case, so If Juniper ask me what I have found, I will respond to that and I will not publish more stuff in the forum.
Juniper should know better how their systems realy work and not cover the sun with a sieve.
As administrator of SA, I'm not worried about this flaw... I'm have good time with it
Updates have been made to the JSA.