← Back

CVE-2021-0265

nvd nist
Published: Apr 22, 2021Modified: Jun 17, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: sirt@juniper.net (Secondary)

Description

An unvalidated REST API in the AppFormix Agent of Juniper Networks AppFormix allows an unauthenticated remote attacker to execute commands as root on the host running the AppFormix Agent, when certain preconditions are performed by the attacker, thus granting the attacker full control over the environment. This issue affects: Juniper Networks AppFormix 3 versions prior to 3.1.22, 3.2.14, 3.3.0.

Affected (2)

Products: Juniper: Appformix
1 product
Appformix
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
From 3.0.0 to 3.1.22
From 3.2.0 to 3.2.14

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.