CVE-2025-59968
7.7
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:GreenShow more
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:GreenShow less
Source: sirt@juniper.net (Secondary)
Description
A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface.
Tampering with this metadata can result in managed SRX Series devices permitting network traffic that should otherwise be blocked by policy, effectively bypassing intended security controls.
This issue affects Junos Space Security Director
* all versions prior to 24.1R3 Patch V4
This issue does not affect managed cSRX Series devices.
Affected (4)
Products: Juniper: Space Security Director
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 24.1 |
| Running on/with | Platform Versions |
|---|---|
Juniper Srx1500 | All versions |
Juniper Srx1600 | All versions |
Juniper Srx2300 | All versions |
Juniper Srx300 | All versions |
Juniper Srx320 | All versions |
Juniper Srx340 | All versions |
Juniper Srx345 | All versions |
Juniper Srx380 | All versions |
Juniper Srx4100 | All versions |
Juniper Srx4120 | All versions |
Juniper Srx4200 | All versions |
Juniper Srx4300 | All versions |
Juniper Srx4600 | All versions |
Juniper Srx4700 | All versions |
Juniper Srx5400 | All versions |
Juniper Srx5600 | All versions |
Juniper Srx5800 | All versions |
Juniper Vsrx | All versions |
References (2)
Source: sirt@juniper.net
Technical Description
Timeline
No history available yet.