Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-31381 EUVD-2021-18291GHSA-7wfg-7xjc-w75v

SRC Series: A remote attacker sending a specially crafted query may cause the web server to delete files

Published Oct 19, 2021 · Updated Sep 16, 2024 · Assigned by juniper

Description

A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to delete files which may allow the attacker to disrupt the integrity and availability of the system.

Affected products

VendorProductAffectedFixed
Juniper Networks SRC Series unspecified – < 4.12.0R5, 4.13.0 – < 4.13.0R3 4.12.0R5

References