CVE-2017-2342: Missing Report of Error Condition

MACsec feature on Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does not report errors when a secure link can not be established. It falls back to an unencrypted link. This can happen when MACsec is configured on ports that are not capable of MACsec or when a secure lin...

PT-2017-15370

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D100 on SRX300 series Description The MACsec feature on Juniper Networks Junos OS does not report errors when a secure link cannot be established, falling back to an unencrypted link instead. This can occur...

Web Application Session Cookies Not Marked Secure

The remote web application uses cookies to track authenticated users. However, there are instances where the application is running over unencrypted HTTP or the cookies are not marked 'secure', meaning the browser could send them back over an unencrypted link under certain circumstances. As a...