Description (CNA)
A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S3, 20.2R2; This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Juniper Networks / Junos OS | affected 19.3 before 19.3R2-S6, 19.3R3-S1; affected 19.4 before 19.4R2-S4, 19.4R3; affected 20.1 before 20.1R1-S4, 20.1R2; affected 20.2 before 20.2R1-S3, 20.2R2 |
| Juniper Networks / Junos OS | unaffected unspecified before 19.3R1 |
CWE
CWE-22
References
ADP enrichment
No English description supplied.