CVE-2021-31350 Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)

An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operations as root, leading to complete compromise of the...

CVE-2021-31350

CVE-2021-31350 affects Juniper Junos OS and Junos OS Evolved via the Juniper Extension Toolkit (JET) gRPC API. The issue stems from jsd authenticating a user and passing configuration operations to mgd (root-owned), enabling network-based, low-privilege attackers to perform root-level operations....

Juniper Junos OS Vulnerability (JSA11215)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11215 advisory. - An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allo...