Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-31380 EUVD-2021-18290GHSA-6cv6-4x62-cqvr

SRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive information

Published Oct 19, 2021 · Updated Sep 16, 2024 · Assigned by juniper

Description

A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to disclose sensitive information in the HTTP response which allows the attacker to obtain sensitive information.

Affected products

VendorProductAffectedFixed
Juniper Networks SRC Series unspecified – < 4.12.0R5, 4.13.0 – < 4.13.0R3 4.12.0R5

References