CVE-2022-22251

On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 version 20.2R1 and later versions prior to 21.2R1 on cSRX Series.
References
Link Resource
https://kb.juniper.net/JSA69908 Mitigation Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*

Information

Published : 2022-10-17 20:15

Updated : 2022-10-21 10:08


NVD link : CVE-2022-22251

Mitre link : CVE-2022-22251


JSON object : View

CWE
CWE-522

Insufficiently Protected Credentials

Advertisement

dedicated server usa

Products Affected

juniper

  • csrx
  • junos