Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-0231 EUVD-2021-2850GHSA-xg3m-83f6-pq94

Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.

Published Apr 22, 2021 · Updated Sep 17, 2024 · Assigned by juniper

Vendor: Juniper Networks Product: Junos OS Category: Network devices

Description

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S3, 20.2R2; This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS 19.3 – < 19.3R2-S6, 19.3R3-S1, 19.4 – < 19.4R2-S4, 19.4R3, 20.1 – < 20.1R1-S4, 20.1R2, 20.2 – < 20.2R1-S3, 20.2R2 19.3R2-S6, 19.3R3-S1

References