VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 22, 2021· Updated Sep 17, 2024

Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.

CVE-2021-0231

Description

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S3, 20.2R2; This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.

Affected products

2
  • Juniper Networks/Junosllm-fuzzy2 versions
    19.3 prior to 19.3R2-S6, 19.3R3-S1; 19.4 prior to 19.4R2-S4, 19.4R3; 20.1 prior to 20.1R1-S4, 20.1R2; 20.2 prior to 20.2R1-S3, 20.2R2+ 1 more
    • (no CPE)range: 19.3 prior to 19.3R2-S6, 19.3R3-S1; 19.4 prior to 19.4R2-S4, 19.4R3; 20.1 prior to 20.1R1-S4, 20.1R2; 20.2 prior to 20.2R1-S3, 20.2R2
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.