PT-2025-41407 · Juniper Networks · Junos Space Security Director+1

Published 2025-10-08 · Updated 2025-12-26 · CVE-2025-59968

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space Security Director versions prior to 24.1R3 Patch V4

Description A missing authorization issue exists in Juniper Networks Junos Space Security Director. An unauthenticated network-based attacker can read or modify metadata through the web interface. Modifying this metadata can lead to managed SRX Series devices allowing network traffic that should be blocked by policy, bypassing security controls. This issue does not affect managed cSRX Series devices.

Recommendations Update to Junos Space Security Director version 24.1R3 Patch V4 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2025-16006

CVE-2025-59968

Affected Products

Junos Space Security Director

Srx Series

References · 9

• https://osv.dev/vulnerability/CVE-2025-59968 · Vendor Advisory
• https://supportportal.juniper.net/JSA103157 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-16006 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-59968 · Security Note
• https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Juniper-Security-Director-Insufficient-authorization-for-sensitive-resources-in-web-interface-CVE-2025-59968 · Note
• https://t.me/CVEtracker/34536 · Telegram Post
• https://juniper.net/documentation/us/en/software/nm-apps24.1/junos-space-security-director/topics/task/junos-space-metadata-creating.html · Note
• https://twitter.com/CVEnew/status/1976328952479350983 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1976331063224938736 · Twitter Post