CVE-2019-0062: Junos OS: Session fixation vulnerability in J-Web

Published Oct 9, 2019

Updated

A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administrators web session and potentially gain administrative access to the device. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S15 on EX Series; 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 14.1X53 versions prior to 14.1X53-D51; 15.1 versions prior to 15.1F6-S13, 15.1R7-S5; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238; 16.1 versions prior to 16.1R4-S13, 16.1R7-S5; 16.2 versions prior to 16.2R2-S10; 17.1 versions prior to 17.1R3-S1; 17.2 versions prior to 17.2R2-S8, 17.2R3-S3; 17.3 versions prior to 17.3R3-S5; 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S2, 19.1R2.

Affected Software

239 affected components

Juniper Junos=12.3

Juniper Junos=12.3-r1

Juniper Junos=12.3-r11

Juniper Junos=12.3-r12

Juniper Junos=12.3-r12-s13

Juniper Junos=12.3-r12-s14

Juniper Junos=12.3-r2

Juniper Junos=12.3-r3

Juniper Junos=12.3-r4

Juniper Junos=12.3-r5

Juniper Junos=12.3-r6

Juniper Junos=12.3-r7

Juniper Junos=12.3-r8

Juniper Junos=12.3-r9

Juniper EX2200

Juniper EX2200-C

Juniper EX2300

Juniper EX2300-C

Juniper EX3200

Juniper EX3300

Juniper EX3400

Juniper EX4200

Juniper EX4300

Juniper EX4500

Juniper EX4550

Juniper EX4600

Juniper EX4650

Juniper EX6210

Juniper EX8208

Juniper EX8216

Juniper Ex9204

Juniper Ex9208

Juniper Ex9214

Juniper EX9251

Juniper Ex9253

Juniper Junos=12.3x48

Juniper Junos=12.3x48-d10

Juniper Junos=12.3x48-d15

Juniper Junos=12.3x48-d20

Juniper Junos=12.3x48-d25

Juniper Junos=12.3x48-d30

Juniper Junos=12.3x48-d35

Juniper Junos=12.3x48-d40

Juniper Junos=12.3x48-d45

Juniper Junos=12.3x48-d50

Juniper Junos=12.3x48-d55

Juniper Junos=12.3x48-d60

Juniper Junos=12.3x48-d65

Juniper Junos=12.3x48-d70

Juniper Junos=12.3x48-d75

Juniper Junos=12.3x48-d80

Juniper cSRX

Juniper SRX100

Juniper SRX110

Juniper SRX1400

Juniper SRX1500

Juniper SRX210

Juniper SRX220

Juniper SRX240

Juniper SRX300

Juniper SRX320

Juniper SRX340

Juniper SRX3400

Juniper SRX345

Juniper SRX3600

Juniper SRX4100

Juniper SRX4200

Juniper SRX4600

Juniper SRX5400

Juniper SRX550

Juniper Srx550 Hm

Juniper SRX5600

Juniper SRX5800

Juniper SRX650

Juniper vSRX

Juniper Junos=14.1x53

Juniper Junos=14.1x53-d10

Juniper Junos=14.1x53-d15

Juniper Junos=14.1x53-d16

Juniper Junos=14.1x53-d25

Juniper Junos=14.1x53-d26

Juniper Junos=14.1x53-d27

Juniper Junos=14.1x53-d30

Juniper Junos=14.1x53-d35

Juniper Junos=14.1x53-d40

Juniper Junos=14.1x53-d45

Juniper Junos=14.1x53-d48

Juniper Junos=14.1x53-d49

Juniper Junos=15.1

Juniper Junos=15.1-f1

Juniper Junos=15.1-f2

Juniper Junos=15.1-f2-s1

Juniper Junos=15.1-f2-s2

Juniper Junos=15.1-f2-s3

Juniper Junos=15.1-f2-s4

Juniper Junos=15.1-f3

Juniper Junos=15.1-f4

Juniper Junos=15.1-f5

Juniper Junos=15.1-f6

Juniper Junos=15.1-f6-s3

Juniper Junos=15.1-r1

Juniper Junos=15.1-r2

Juniper Junos=15.1-r3

Juniper Junos=15.1-r4

Juniper Junos=15.1-r4-s9

Juniper Junos=15.1-r5

Juniper Junos=15.1-r6

Juniper Junos=15.1-r6-s6

Juniper Junos=15.1-r7-s1

Juniper Junos=15.1-r7-s2

Juniper Junos=15.1-r7-s3

Juniper Junos=15.1x49

Juniper Junos=15.1x49-d10

Juniper Junos=15.1x49-d100

Juniper Junos=15.1x49-d110

Juniper Junos=15.1x49-d120

Juniper Junos=15.1x49-d130

Juniper Junos=15.1x49-d140

Juniper Junos=15.1x49-d150

Juniper Junos=15.1x49-d160

Juniper Junos=15.1x49-d170

Juniper Junos=15.1x49-d20

Juniper Junos=15.1x49-d30

Juniper Junos=15.1x49-d35

Juniper Junos=15.1x49-d40

Juniper Junos=15.1x49-d45

Juniper Junos=15.1x49-d50

Juniper Junos=15.1x49-d55

Juniper Junos=15.1x49-d60

Juniper Junos=15.1x49-d65

Juniper Junos=15.1x49-d70

Juniper Junos=15.1x49-d75

Juniper Junos=15.1x49-d80

Juniper Junos=15.1x53

Juniper Junos=15.1x53-d20

Juniper Junos=15.1x53-d21

Juniper Junos=15.1x53-d210

Juniper Junos=15.1x53-d25

Juniper Junos=15.1x53-d30

Juniper Junos=15.1x53-d31

Juniper Junos=15.1x53-d32

Juniper Junos=15.1x53-d33

Juniper Junos=15.1x53-d34

Juniper Junos=15.1x53-d40

Juniper Junos=15.1x53-d45

Juniper Junos=15.1x53-d56

Juniper Junos=15.1x53-d60

Juniper Junos=15.1x53-d61

Juniper Junos=15.1x53-d62

Juniper Junos=15.1x53-d63

Juniper Junos=15.1x53-d65

Juniper Junos=15.1x53-d70

Juniper Junos=16.1

Juniper Junos=16.1-r1

Juniper Junos=16.1-r2

Juniper Junos=16.1-r3

Juniper Junos=16.1-r3-s10

Juniper Junos=16.1-r4

Juniper Junos=16.1-r5-s4

Juniper Junos=16.1-r6-s1

Juniper Junos=16.1-r7

Juniper Junos=16.1-r7-s4

Juniper Junos=16.2

Juniper Junos=16.2-r1

Juniper Junos=16.2-r2

Juniper Junos=16.2-r2-s1

Juniper Junos=16.2-r2-s2

Juniper Junos=16.2-r2-s5

Juniper Junos=16.2-r2-s6

Juniper Junos=16.2-r2-s7

Juniper Junos=16.2-r2-s8

Juniper Junos=16.2-r2-s9

Juniper Junos=17.1

Juniper Junos=17.1-r1

Juniper Junos=17.1-r2

Juniper Junos=17.1-r2-s1

Juniper Junos=17.1-r2-s10

Juniper Junos=17.1-r2-s2

Juniper Junos=17.1-r2-s3

Juniper Junos=17.1-r2-s4

Juniper Junos=17.1-r2-s5

Juniper Junos=17.1-r2-s6

Juniper Junos=17.1-r2-s7

Juniper Junos=17.1-r3

Juniper Junos=17.2

Juniper Junos=17.2-r1

Juniper Junos=17.2-r1-s2

Juniper Junos=17.2-r1-s4

Juniper Junos=17.2-r1-s7

Juniper Junos=17.2-r1-s8

Juniper Junos=17.2-r2-s6

Juniper Junos=17.2-r2-s7

Juniper Junos=17.2-r3-s1

Juniper Junos=17.2-r3-s2

Juniper Junos=17.3

Juniper Junos=17.3-r2

Juniper Junos=17.3-r2-s1

Juniper Junos=17.3-r2-s2

Juniper Junos=17.3-r3-s1

Juniper Junos=17.3-r3-s2

Juniper Junos=17.3-r3-s3

Juniper Junos=17.3-r3-s4

Juniper Junos=17.4

Juniper Junos=17.4-r1

Juniper Junos=17.4-r1-s1

Juniper Junos=17.4-r1-s2

Juniper Junos=17.4-r1-s4

Juniper Junos=17.4-r1-s6

Juniper Junos=17.4-r1-s7

Juniper Junos=17.4-r2

Juniper Junos=17.4-r2-s1

Juniper Junos=17.4-r2-s3

Juniper Junos=17.4-r2-s4

Juniper Junos=18.1

Juniper Junos=18.1-r2

Juniper Junos=18.1-r2-s1

Juniper Junos=18.1-r2-s2

Juniper Junos=18.1-r2-s4

Juniper Junos=18.1-r3

Juniper Junos=18.1-r3-s2

Juniper Junos=18.1-r3-s3

Juniper Junos=18.1-r3-s4

Juniper Junos=18.2

Juniper Junos=18.2-r1-s5

Juniper Junos=18.2-r2-s1

Juniper Junos=18.2-r2-s2

Juniper Junos=18.2-r2-s3

Juniper Junos=18.2-r2-s4

Juniper Junos=18.3

Juniper Junos=18.3-r1

Juniper Junos=18.3-r1-s1

Juniper Junos=18.3-r1-s2

Juniper Junos=18.3-r1-s3

Juniper Junos=18.3-r2

Juniper Junos=18.4

Juniper Junos=18.4-r1

Juniper Junos=18.4-r1-s2

Juniper Junos=19.1

Juniper Junos=19.1-r1

Remediation

Information

The following software releases have been updated to resolve this specific issue: 12.3R12-S15*, 12.3X48-D85, 14.1X53-D51, 15.1F6-S13, 15.1R7-S5, 15.1X49-D180, 15.1X53-D238, 16.1R4-S13, 16.1R7-S5, 16.2R2-S10, 17.1R3-S1, 17.2R2-S8, 17.2R3-S3, 17.3R3-S5, 17.4R2-S8, 17.4R3*, 18.1R3-S8*, 18.2R3, 18.3R3, 18.4R2, 19.1R1-S2, 19.1R2, 19.2R1, and all subsequent releases. *pending publication

Event History

Oct 9, 2019

CVE Published

via MITRE·07:26 PM

Data Sourced

via MITRE·07:26 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0062?

CVE-2019-0062 is rated as high severity due to its potential to allow an attacker to hijack administrative sessions on Junos OS devices.

How do I fix CVE-2019-0062?

To fix CVE-2019-0062, upgrade to the patched version of Junos OS as specified in the security advisory.

Which versions of Junos OS are affected by CVE-2019-0062?

CVE-2019-0062 affects Junos OS version 12.3 and its various releases, including 12.3-r1 through 12.3-r14.

What types of attacks can exploit CVE-2019-0062?

CVE-2019-0062 can be exploited through session fixation attacks combined with social engineering tactics.

Is there a workaround for CVE-2019-0062?

No specific workaround is provided for CVE-2019-0062, so applying the necessary updates is the recommended course of action.