CVE-2019-0042

🗓️ 10 Apr 2019 20:13:51Reported by juniperType

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network

Reporter	Title	Published	Views	Family All 6
CNVD	Juniper Networks Identity Management Service Input Validation Error Vulnerability	12 Apr 201900:00	–	cnvd
Cvelist	CVE-2019-0042 Incorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devices	10 Apr 201920:13	–	cvelist
EUVD	EUVD-2019-0849	7 Oct 202500:30	–	euvd
NVD	CVE-2019-0042	10 Apr 201920:29	–	nvd
OSV	CVE-2019-0042	10 Apr 201920:29	–	osv
Prion	Input validation	10 Apr 201920:29	–	prion

NVD

Vulners

Node

juniper identity_management_serviceRange<1.1.4windows

[
  {
    "product": "Juniper Identity Management Service",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "1.1.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kb	www.kb.juniper.net/JSA10934

21 Nov 2024 04:16Current

4.4Medium risk

Vulners AI Score4.4

CVSS 21.9

CVSS 3.14.2

CVSS 35.7

EPSS0.00047

cve-2019-0042 juniper identity management service jims windows srx firewall dos network security