attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
juniper junos, Juniper Networks Junos OS, juniper junos_os_evolved, and Juniper Networks Junos OS Evolved
Classified as
CWE-287 (Improper Authentication)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
juniper
junos
Juniper Networks
Junos OS
juniper
junos_os_evolved
Juniper Networks
Junos OS Evolved
Subsystems
General OT
Sectors
Multiple
What to Know
An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request.
What to Do
Monitor juniper's and Juniper Networks's web pages for any future patch releases. See vendor advisory link below.