Description
Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to partial loss of integrity, which may allow chaining to other vulnerabilities.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Junos OS | Juniper Networks / Junos OS | >= 0, < 20.4R3-S9 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.1, < 21.1* | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.2, < 21.2R3-S6 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.3, < 21.3R3-S5 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.4, < 21.4R3-S5 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.1, < 22.1R3-S4 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.2, < 22.2R3-S2 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.3, < 22.3R3-S1 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.4, < 22.4R2-S2, 22.4R3 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 23.2, < 23.2R1-S1, 23.2R2 | affected |