CVE-2020-1631

Juniper Junos OS Path Traversal Vulnerability

Junos

A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform local file inclusion (LFI) or path traversal. Using this vulnerability, an attacker may be able to inject commands into the httpd.log, read files with 'world' readable permission file or obtain J-Web session tokens. In the case of command…

4. Mai 2020

Ausgewertete Quellen

• Hersteller
  https://kb.juniper.net/JSA11021
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1631
• CISA
  Juniper Junos OS Path Traversal Vulnerability
• NVD
  CVE-2020-1631