PT-2021-12944 · Juniper Networks · Junos

Published 2021-04-22 · Updated 2021-04-27 · CVE-2021-0231

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX and vSRX Series versions 19.3 prior to 19.3R2-S6, 19.3R3-S1 Juniper Networks Junos OS on SRX and vSRX Series versions 19.4 prior to 19.4R2-S4, 19.4R3 Juniper Networks Junos OS on SRX and vSRX Series versions 20.1 prior to 20.1R1-S4, 20.1R2 Juniper Networks Junos OS on SRX and vSRX Series versions 20.2 prior to 20.2R1-S3, 20.2R2

Description: A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files.

Recommendations: For versions 19.3 prior to 19.3R2-S6, 19.3R3-S1, update to version 19.3R2-S6 or 19.3R3-S1 or later. For versions 19.4 prior to 19.4R2-S4, 19.4R3, update to version 19.4R2-S4 or 19.4R3 or later. For versions 20.1 prior to 20.1R1-S4, 20.1R2, update to version 20.1R1-S4 or 20.1R2 or later. For versions 20.2 prior to 20.2R1-S3, 20.2R2, update to version 20.2R1-S3 or 20.2R2 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-0231

Affected Products

Junos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-0231 · Security Note
• https://kb.juniper.net/JSA11126 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0231 · Vendor Advisory
• https://t.me/cvenotify/13824 · Telegram Post