CVE-2020-1677 Juniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability.

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue...

CVE-2020-1675 Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.

When Security Assertion Markup Language SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI...

CVE-2020-1676: Improper Input Validation

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper...

CVE-2020-1675: Improper Check for Certificate Revocation

When Security Assertion Markup Language SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI...

PT-2020-14885

Name of the Vulnerable Software and Affected Versions Juniper Networks Mist Cloud UI versions prior to September 2 2020 Description The issue arises when SAML authentication is enabled, and the Juniper Networks Mist Cloud UI incorrectly handles child elements in SAML responses. This allows a remo...

PT-2020-14883

Name of the Vulnerable Software and Affected Versions Juniper Networks Mist Cloud UI versions prior to September 2 2020 Description The issue occurs when Security Assertion Markup Language SAML authentication is enabled, allowing a malicious network-based user to access unauthorized data due to...

CVE-2020-1677: Improper Input Validation

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue...