CVE-2024-30381

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Juniper Networks Paragon Active Assurance Control Center allows a network-adjacent attacker with root access to a Test Agent Appliance the ability to access sensitive information about downstream devices. The...

CVE-2024-30381 Paragon Active Assurance: probe_serviced exposes internal objects to local users

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Juniper Networks Paragon Active Assurance Control Center allows a network-adjacent attacker with root access to a Test Agent Appliance the ability to access sensitive information about downstream devices. The...

CVE-2024-30381 Paragon Active Assurance: probe_serviced exposes internal objects to local users

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Juniper Networks Paragon Active Assurance Control Center allows a network-adjacent attacker with root access to a Test Agent Appliance the ability to access sensitive information about downstream devices. The...

CVE-2024-30381

CVE-2024-30381 affects Juniper Networks Paragon Active Assurance Control Center (versions 4.1.0–4.2.0). The netrounds-probe-login (probe_serviced) daemon exposes functions that let a Test Agent Appliance push interface state/config and unregister, inadvertently revealing an internal database obje...