On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 version 20.2R1 and later versions prior to 21.2R1 on cSRX Series.
References
Link | Resource |
---|---|
https://kb.juniper.net/JSA69908 | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2022-10-17 20:15
Updated : 2022-10-21 10:08
NVD link : CVE-2022-22251
Mitre link : CVE-2022-22251
JSON object : View
CWE
CWE-522
Insufficiently Protected Credentials
Products Affected
juniper
- csrx
- junos