CVE-2021-31349

The usage of an internal HTTP header created an authentication bypass vulnerability CWE-287, allowing an attacker to view internal files, change settings, manipulate services and execute arbitrary code. This issue affects all Juniper Networks 128 Technology Session Smart Router versions prior to...

CVE-2021-31349

CVE-2021-31349 affects Juniper Networks 128 Technology Session Smart Router. An authentication bypass flaw arises from the use of an internal HTTP header, enabling a remote attacker to bypass authentication and potentially view internal files, change settings, manipulate services, and execute arb...