Description (CNA)
An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Juniper Networks / Junos OS | affected 15.1X49 before 15.1X49-D120 |
CWE
CWE-295, CWE-300
References
- https://kb.juniper.net/JSA10952
- https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html
ADP enrichment
No English description supplied.