Description
Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Junos OS | Juniper Networks / Junos OS | >= 0, < 20.4R3-S8 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.1, < 21.1* | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.2, < 21.2R3-S6 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.3, < 21.3R3-S5 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.4, < 21.4R3-S5 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.1, < 22.1R3-S3 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.2, < 22.2R3-S2 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.3, < 22.3R2-S2, 22.3R3 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.4, < 22.4R2-S1, 22.4R3 | affected |