PT-2021-19277 · Juniper Networks+1 · Juniper Networks Src Series+1

Published 2021-10-19 · Updated 2021-10-25 · CVE-2021-31380

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Juniper Networks SRC Series (affected versions not specified)

Description A configuration weakness in the JBoss Application Server component allows a remote attacker to send a specially crafted query to cause the web server to disclose sensitive information in the HTTP response, enabling the attacker to obtain sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

CWE-16

Related Identifiers

CVE-2021-31380

Affected Products

Jboss Application Server

Juniper Networks Src Series

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-31380 · Security Note
• https://osv.dev/vulnerability/CVE-2021-31380 · Vendor Advisory
• https://kb.juniper.net/JSA11248 · Vendor Advisory
• https://t.me/cibsecurity/30836 · Telegram Post