← Back

CVE-2021-0231

nvd nist
Published: Apr 22, 2021Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: sirt@juniper.net (Secondary)

Description

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S3, 20.2R2; This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.

Affected (24)

Products: Juniper: Junos
Juniper
1 product
Junos
Configuration A
24 vulnerable · 14 platform
Vulnerable SoftwareAffected Versions
Juniper
Junos
Version 19.3
Junos
Version 19.3 r1-s1
Junos
Version 19.3 r1
Junos
Version 19.3 r2-s1
Junos
Version 19.3 r2-s2
Junos
Version 19.3 r2-s3
Junos
Version 19.3 r2-s4
Junos
Version 19.3 r2-s5
Junos
Version 19.3 r2
Junos
Version 19.3 r3
Junos
Version 19.4 r1-s1
Junos
Version 19.4 r1-s2
Junos
Version 19.4 r1
Junos
Version 19.4 r2-s1
Junos
Version 19.4 r2-s2
Junos
Version 19.4 r2-s3
Junos
Version 19.4 r2
Junos
Version 20.1 r1-s1
Junos
Version 20.1 r1-s2
Junos
Version 20.1 r1-s3
Junos
Version 20.1 r1
Junos
Version 20.2 r1-s1
Junos
Version 20.2 r1-s2
Junos
Version 20.2 r1
Running on/withPlatform Versions
Juniper
Srx1500
All versions
Juniper
Srx300
All versions
Juniper
Srx320
All versions
Juniper
Srx340
All versions
Juniper
Srx345
All versions
Juniper
Srx380
All versions
Juniper
Srx4100
All versions
Juniper
Srx4200
All versions
Juniper
Srx4600
All versions
Juniper
Srx5400
All versions
Juniper
Srx550
All versions
Juniper
Srx5600
All versions
Juniper
Srx5800
All versions
Juniper
Vsrx
All versions

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.