PT-2020-14883 · Juniper Networks · Mist Cloud Ui

Published 2020-10-16 · Updated 2022-01-01 · CVE-2020-1675

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Juniper Networks Mist Cloud UI versions prior to September 2 2020

Description The issue occurs when Security Assertion Markup Language (SAML) authentication is enabled, allowing a malicious network-based user to access unauthorized data due to incorrect processing of invalid authentication certificates.

Recommendations For versions prior to September 2 2020, update to a version released after September 2 2020 to resolve the issue.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

CWE-299

Related Identifiers

CVE-2020-1675

Affected Products

Mist Cloud Ui

References · 3

• https://osv.dev/vulnerability/CVE-2020-1675 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1675 · Security Note
• https://kb.juniper.net/JSA11072 · Vendor Advisory