PT-2019-2082 · Microsoft+1 · Windows+2
Publicado
2019-04-10
·
Atualizado
2021-10-28
·
CVE-2019-0042
CVSS v3.1
5.7
Média
| Vetor | AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4
Description
The issue allows an attacker with physical access to an existing domain-connected Windows system to bypass SRX firewall policies or trigger a Denial of Service (DoS) condition for the network. This is due to insufficient input validation in the Juniper Identity Management Service, which may send an incorrect message to associated SRX services gateways.
Recommendations
For Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4, update to version 1.1.4 or later to resolve the issue. As a temporary workaround, consider restricting physical access to domain-connected Windows systems to minimize the risk of exploitation.
Correção
RCE
Improper Resource Release
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Juniper Identity Management Service
Srx
Windows