Description
A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Junos OS | Juniper Networks / Junos OS | >= 12.3, < 12.3R12-S16 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 12.3X48, < 12.3X48-D101, 12.3X48-D105 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 14.1X53, < 14.1X53-D54 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 15.1, < 15.1R7-S7 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 15.1X49, < 15.1X49-D211, 15.1X49-D220 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 16.1, < 16.1R7-S8 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 17.2, < 17.2R3-S4 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 17.3, < 17.3R3-S8 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 17.4, < 17.4R2-S11, 17.4R3-S2 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 18.1, < 18.1R3-S10 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 18.2, < 18.2R2-S7, 18.2R3-S4 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 18.3, < 18.3R2-S4, 18.3R3-S2 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 18.4, < 18.4R1-S7, 18.4R3-S2 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 19.1, < 19.1R1-S5, 19.1R3-S1 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 19.2, < 19.2R2 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 19.3, < 19.3R2-S3, 19.3R3 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 19.4, < 19.4R1-S2, 19.4R2 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 20.1, < 20.1R1-S1, 20.1R2 | affected |