Juniper Junos CVE-2019-0062 Session Fixation Vulnerability

Description Juniper Junos is prone to a session-fixation vulnerability. An attacker can hijack an arbitrary session and gain unauthorized access to the affected application. The following versions of Juniper Junos are affected: Junper Junos 12.3 versions prior to 12.3R12-S15 for Juniper EX Series...

PT-2019-3481

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.2R1, 18.2X75-D5. Description An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device...

PT-2019-3485

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D171, 15.1X49-D180 Junos OS versions prior to 15.1X53-D496, 15.1X53-D69 Junos OS versions prior to 16.1R7-S4 Junos OS versions prior to 16.2R2-S9 Junos OS versions prior to 17.1R3 Junos OS versions prior to...

Juniper Junos J-Web CVE-2019-0047 HTML Injection Vulnerability

Description Juniper Junos is prone to an HTML-injection vulnerability. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is...

Juniper Junos CVE-2019-0066 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 15.1 Juniper Junos 15.1A2 Juniper Junos 15.1F1 Juniper Junos 15.1F2 Juniper Junos 15.1F2-S14 Juniper Junos...

PT-2019-4187

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1F6-S12 Junos OS versions 16.1R6 through 16.1R6-S6 Junos OS versions 16.1R7 through 16.1R7-S3 Junos OS versions prior to 17.1R3 Junos OS versions 17.2R1-S3 through 17.2R3-S1 Junos OS versions 17.3R1-S1 through...

CVE-2019-0056: Insufficient Resource Pool

This issue only affects devices with three 3 or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First OSPF states to transition to Down, resulting in a...

CVE-2019-0070: Improper Input Validation

An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to ta...

CVE-2019-0060: Improper Handling of Exceptional Conditions

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service DoS condition. This issue only occurs...

CVE-2019-0067: Undefined Security Weakness

Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart vmcore. By continuously sending a specially crafted IPv6 packet, an attacker can repeatedly crash the system causing a prolonged Denial of Service DoS. This issue affects Juniper Networks Jun...

CVE-2019-0074: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...

PT-2019-3491

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1F6-S12 Juniper Networks Junos OS versions prior to 15.1R7-S2 Juniper Networks Junos OS versions prior to 15.1X49-D150 on SRX Series Juniper Networks Junos OS versions prior to 15.1X53-D68 Juniper...

PT-2019-3869

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 18.2R1 on NFX Series. Description The issue is caused by insufficient input validation, allowing a malicious local attacker to elevate their permissions and execute commands outside their authorized scope of control,...

PT-2019-3478

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3X48-D61 Juniper Networks Junos OS versions prior to 15.1X49-D130 Juniper Networks Junos OS versions prior to 17.3R3 Juniper Networks Junos OS versions prior to 17.4R2 Description A vulnerability ...

CVE-2019-0050: Undefined Security Weakness

Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srxpfe can result in an extended denial of service condition. The SRX device may fail to forward traffic when this condition occurs. Affected...

Juniper Junos CVE-2019-0060 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a process crash, denying service to legitimate users. The following versions of Juniper Junos are affected: Juniper Junos 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180 are...

PT-2019-3867

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX5000 Series versions 12.3X48 through 12.3X48-D84 Juniper Networks Junos OS on SRX5000 Series versions 15.1X49 through 15.1X49-D179 Juniper Networks Junos OS on SRX5000 Series versions 17.3 through 17.3R3-S6...

CVE-2019-0055: Improper Handling of Length Parameter Inconsistency

A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing...

PT-2019-3484

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D171 Junos OS versions 15.1X49-D180 on SRX Series Junos OS versions 18.2R2-S1 and later, prior to 18.2R3 on SRX Series Junos OS versions prior to 18.4R2 on SRX Series Description The issue is related to error...

CVE-2019-0071: Improper Verification of Cryptographic Signature

Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specific versions of Junos OS, affecting specific EX Series platforms, the Veriexec subsystem will fail to initialize, in essence disabling file integrit...