What is the severity of CVE-2021-31385?

CVE-2021-31385 is rated as high severity due to its potential for privilege escalation.

How do I fix CVE-2021-31385?

To remediate CVE-2021-31385, upgrade to a patched version of Junos OS as specified in the Juniper security advisory.

What systems are affected by CVE-2021-31385?

CVE-2021-31385 affects various versions of Juniper Networks Junos OS, including 12.3, 15.1, 18.3, 18.4, and 19.x versions.

Who can exploit CVE-2021-31385?

CVE-2021-31385 can be exploited by any low-privileged authenticated attacker.

What is the impact of CVE-2021-31385?

The impact of CVE-2021-31385 is the potential elevation of privileges to root on the affected systems.

Vulnerability/
CVE-2021-31385

high

8.8

CWE

19/10/2021

16/9/2024

CVE-2021-31385: Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root

First published: Tue Oct 19 2021(Updated: )

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in J-Web of Juniper Networks Junos OS allows any low-privileged authenticated attacker to elevate their privileges to root. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S19; 15.1 versions prior to 15.1R7-S10; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R2-S2, 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S1, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2.

Credit: sirt@juniper.net

Affected Software	Affected Version	How to fix
Junos OS Evolved	=12.3
Junos OS Evolved	=12.3-r1
Junos OS Evolved	=12.3-r10
Junos OS Evolved	=12.3-r10-s1
Junos OS Evolved	=12.3-r10-s2
Junos OS Evolved	=12.3-r11
Junos OS Evolved	=12.3-r12
Junos OS Evolved	=12.3-r12-s1
Junos OS Evolved	=12.3-r12-s10
Junos OS Evolved	=12.3-r12-s11
Junos OS Evolved	=12.3-r12-s12
Junos OS Evolved	=12.3-r12-s13
Junos OS Evolved	=12.3-r12-s14
Junos OS Evolved	=12.3-r12-s15
Junos OS Evolved	=12.3-r12-s16
Junos OS Evolved	=12.3-r12-s17
Junos OS Evolved	=12.3-r12-s18
Junos OS Evolved	=12.3-r12-s3
Junos OS Evolved	=12.3-r12-s4
Junos OS Evolved	=12.3-r12-s6
Junos OS Evolved	=12.3-r12-s8
Junos OS Evolved	=12.3-r2
Junos OS Evolved	=12.3-r3
Junos OS Evolved	=12.3-r4
Junos OS Evolved	=12.3-r5
Junos OS Evolved	=12.3-r6
Junos OS Evolved	=12.3-r7
Junos OS Evolved	=12.3-r8
Junos OS Evolved	=12.3-r9
Junos OS Evolved	=15.1
Junos OS Evolved	=15.1-a1
Junos OS Evolved	=15.1-f
Junos OS Evolved	=15.1-f1
Junos OS Evolved	=15.1-f2
Junos OS Evolved	=15.1-f2-s1
Junos OS Evolved	=15.1-f2-s2
Junos OS Evolved	=15.1-f2-s3
Junos OS Evolved	=15.1-f2-s4
Junos OS Evolved	=15.1-f3
Junos OS Evolved	=15.1-f4
Junos OS Evolved	=15.1-f5
Junos OS Evolved	=15.1-f5-s7
Junos OS Evolved	=15.1-f6
Junos OS Evolved	=15.1-f6-s1
Junos OS Evolved	=15.1-f6-s10
Junos OS Evolved	=15.1-f6-s12
Junos OS Evolved	=15.1-f6-s2
Junos OS Evolved	=15.1-f6-s3
Junos OS Evolved	=15.1-f6-s4
Junos OS Evolved	=15.1-f6-s5
Junos OS Evolved	=15.1-f6-s6
Junos OS Evolved	=15.1-f6-s7
Junos OS Evolved	=15.1-f6-s8
Junos OS Evolved	=15.1-f6-s9
Junos OS Evolved	=15.1-f7
Junos OS Evolved	=15.1-r
Junos OS Evolved	=15.1-r1
Junos OS Evolved	=15.1-r2
Junos OS Evolved	=15.1-r3
Junos OS Evolved	=15.1-r4
Junos OS Evolved	=15.1-r4-s7
Junos OS Evolved	=15.1-r4-s8
Junos OS Evolved	=15.1-r4-s9
Junos OS Evolved	=15.1-r5
Junos OS Evolved	=15.1-r5-s1
Junos OS Evolved	=15.1-r5-s3
Junos OS Evolved	=15.1-r5-s5
Junos OS Evolved	=15.1-r5-s6
Junos OS Evolved	=15.1-r6
Junos OS Evolved	=15.1-r6-s1
Junos OS Evolved	=15.1-r6-s2
Junos OS Evolved	=15.1-r6-s3
Junos OS Evolved	=15.1-r6-s4
Junos OS Evolved	=15.1-r6-s6
Junos OS Evolved	=15.1-r7
Junos OS Evolved	=15.1-r7-s1
Junos OS Evolved	=15.1-r7-s2
Junos OS Evolved	=15.1-r7-s3
Junos OS Evolved	=15.1-r7-s4
Junos OS Evolved	=15.1-r7-s5
Junos OS Evolved	=15.1-r7-s6
Junos OS Evolved	=15.1-r7-s7
Junos OS Evolved	=15.1-r7-s8
Junos OS Evolved	=15.1-r7-s9
Junos OS Evolved	=18.3
Junos OS Evolved	=18.3-r1
Junos OS Evolved	=18.3-r1-s1
Junos OS Evolved	=18.3-r1-s2
Junos OS Evolved	=18.3-r1-s3
Junos OS Evolved	=18.3-r1-s4
Junos OS Evolved	=18.3-r1-s5
Junos OS Evolved	=18.3-r1-s6
Junos OS Evolved	=18.3-r2
Junos OS Evolved	=18.3-r2-s1
Junos OS Evolved	=18.3-r2-s2
Junos OS Evolved	=18.3-r2-s3
Junos OS Evolved	=18.3-r2-s4
Junos OS Evolved	=18.3-r3
Junos OS Evolved	=18.3-r3-s1
Junos OS Evolved	=18.3-r3-s2
Junos OS Evolved	=18.3-r3-s3
Junos OS Evolved	=18.3-r3-s4
Junos OS Evolved	=18.4
Junos OS Evolved	=18.4-r1
Junos OS Evolved	=18.4-r1-s1
Junos OS Evolved	=18.4-r1-s2
Junos OS Evolved	=18.4-r1-s3
Junos OS Evolved	=18.4-r1-s4
Junos OS Evolved	=18.4-r1-s5
Junos OS Evolved	=18.4-r1-s6
Junos OS Evolved	=18.4-r1-s7
Junos OS Evolved	=18.4-r2
Junos OS Evolved	=18.4-r2-s1
Junos OS Evolved	=18.4-r2-s2
Junos OS Evolved	=18.4-r2-s3
Junos OS Evolved	=18.4-r2-s4
Junos OS Evolved	=18.4-r2-s5
Junos OS Evolved	=18.4-r2-s6
Junos OS Evolved	=18.4-r2-s7
Junos OS Evolved	=18.4-r2-s8
Junos OS Evolved	=18.4-r3
Junos OS Evolved	=18.4-r3-s1
Junos OS Evolved	=18.4-r3-s2
Junos OS Evolved	=18.4-r3-s3
Junos OS Evolved	=18.4-r3-s4
Junos OS Evolved	=18.4-r3-s5
Junos OS Evolved	=18.4-r3-s6
Junos OS Evolved	=18.4-r3-s7
Junos OS Evolved	=18.4-r3-s8
Junos OS Evolved	=19.1
Junos OS Evolved	=19.1-r1
Junos OS Evolved	=19.1-r1-s1
Junos OS Evolved	=19.1-r1-s2
Junos OS Evolved	=19.1-r1-s3
Junos OS Evolved	=19.1-r1-s4
Junos OS Evolved	=19.1-r1-s5
Junos OS Evolved	=19.1-r1-s6
Junos OS Evolved	=19.1-r2
Junos OS Evolved	=19.1-r2-s1
Junos OS Evolved	=19.1-r2-s2
Junos OS Evolved	=19.1-r3
Junos OS Evolved	=19.1-r3-s1
Junos OS Evolved	=19.1-r3-s2
Junos OS Evolved	=19.1-r3-s3
Junos OS Evolved	=19.1-r3-s4
Junos OS Evolved	=19.1-r3-s5
Junos OS Evolved	=19.2
Junos OS Evolved	=19.2-r1
Junos OS Evolved	=19.2-r1-s1
Junos OS Evolved	=19.2-r1-s2
Junos OS Evolved	=19.2-r1-s3
Junos OS Evolved	=19.2-r1-s4
Junos OS Evolved	=19.2-r1-s5
Junos OS Evolved	=19.2-r1-s6
Junos OS Evolved	=19.2-r2
Junos OS Evolved	=19.2-r2-s1
Junos OS Evolved	=19.2-r3
Junos OS Evolved	=19.2-r3-s1
Junos OS Evolved	=19.2-r3-s2
Junos OS Evolved	=19.3
Junos OS Evolved	=19.3-r1
Junos OS Evolved	=19.3-r1-s1
Junos OS Evolved	=19.3-r2
Junos OS Evolved	=19.3-r2-s1
Junos OS Evolved	=19.3-r2-s2
Junos OS Evolved	=19.3-r2-s3
Junos OS Evolved	=19.3-r2-s4
Junos OS Evolved	=19.3-r2-s5
Junos OS Evolved	=19.3-r3
Junos OS Evolved	=19.3-r3-s1
Junos OS Evolved	=19.3-r3-s2
Junos OS Evolved	=19.4-r1
Junos OS Evolved	=19.4-r1-s1
Junos OS Evolved	=19.4-r1-s2
Junos OS Evolved	=19.4-r1-s3
Junos OS Evolved	=19.4-r2
Junos OS Evolved	=19.4-r2-s1
Junos OS Evolved	=19.4-r2-s2
Junos OS Evolved	=19.4-r2-s3
Junos OS Evolved	=19.4-r2-s4
Junos OS Evolved	=19.4-r3
Junos OS Evolved	=19.4-r3-s1
Junos OS Evolved	=19.4-r3-s2
Junos OS Evolved	=19.4-r3-s3
Junos OS Evolved	=19.4-r3-s4
Junos OS Evolved	=20.1-r1
Junos OS Evolved	=20.1-r1-s1
Junos OS Evolved	=20.1-r1-s2
Junos OS Evolved	=20.1-r1-s3
Junos OS Evolved	=20.1-r1-s4
Junos OS Evolved	=20.1-r2
Junos OS Evolved	=20.1-r2-s1
Junos OS Evolved	=20.1-r3
Junos OS Evolved	=20.2-r1
Junos OS Evolved	=20.2-r1-s1
Junos OS Evolved	=20.2-r1-s2
Junos OS Evolved	=20.2-r1-s3
Junos OS Evolved	=20.2-r2
Junos OS Evolved	=20.2-r2-s1
Junos OS Evolved	=20.2-r2-s2
Junos OS Evolved	=20.2-r2-s3
Junos OS Evolved	=20.2-r3
Junos OS Evolved	=20.2-r3-s1
Junos OS Evolved	=20.3-r1
Junos OS Evolved	=20.3-r1-s1
Junos OS Evolved	=20.3-r2
Junos OS Evolved	=20.3-r2-s1
Junos OS Evolved	=20.4-r1
Junos OS Evolved	=20.4-r1-s1
Junos OS Evolved	=20.4-r2
Junos OS Evolved	=21.1-r1

Remedy

The following software releases have been updated to resolve this specific issue: 12.3R12-S19, 15.1R7-S10, 18.3R3-S5, 18.4R3-S9, 19.1R3-S6, 19.2R1-S7, 19.2R3-S3, 19.3R3-S3, 19.4R3-S5, 20.1R2-S2, 20.1R3-S1, 20.2R3-S2, 20.3R3, 20.4R2-S1, 20.4R3, 21.1R1-S1, 21.1R2, 21.2R1, and all subsequent releases.

Never miss a vulnerability like this again

Reference Links

https://kb.juniper.net/JSA11253

Frequently Asked Questions

What is the severity of CVE-2021-31385?
CVE-2021-31385 is rated as high severity due to its potential for privilege escalation.
How do I fix CVE-2021-31385?
To remediate CVE-2021-31385, upgrade to a patched version of Junos OS as specified in the Juniper security advisory.
What systems are affected by CVE-2021-31385?
CVE-2021-31385 affects various versions of Juniper Networks Junos OS, including 12.3, 15.1, 18.3, 18.4, and 19.x versions.
Who can exploit CVE-2021-31385?
CVE-2021-31385 can be exploited by any low-privileged authenticated attacker.
What is the impact of CVE-2021-31385?
The impact of CVE-2021-31385 is the potential elevation of privileges to root on the affected systems.

agent/type
agent/author
agent/weakness
agent/references
agent/title
agent/severity
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/remedy
agent/first-publish-date
agent/event
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/juniper
canonical/junos os evolved
version/junos os evolved/12.3
version/junos os evolved/12.3-r1
version/junos os evolved/12.3-r10
version/junos os evolved/12.3-r10-s1
version/junos os evolved/12.3-r10-s2
version/junos os evolved/12.3-r11
version/junos os evolved/12.3-r12
version/junos os evolved/12.3-r12-s1
version/junos os evolved/12.3-r12-s10
version/junos os evolved/12.3-r12-s11
version/junos os evolved/12.3-r12-s12
version/junos os evolved/12.3-r12-s13
version/junos os evolved/12.3-r12-s14
version/junos os evolved/12.3-r12-s15
version/junos os evolved/12.3-r12-s16
version/junos os evolved/12.3-r12-s17
version/junos os evolved/12.3-r12-s18
version/junos os evolved/12.3-r12-s3
version/junos os evolved/12.3-r12-s4
version/junos os evolved/12.3-r12-s6
version/junos os evolved/12.3-r12-s8
version/junos os evolved/12.3-r2
version/junos os evolved/12.3-r3
version/junos os evolved/12.3-r4
version/junos os evolved/12.3-r5
version/junos os evolved/12.3-r6
version/junos os evolved/12.3-r7
version/junos os evolved/12.3-r8
version/junos os evolved/12.3-r9
version/junos os evolved/15.1
version/junos os evolved/15.1-a1
version/junos os evolved/15.1-f
version/junos os evolved/15.1-f1
version/junos os evolved/15.1-f2
version/junos os evolved/15.1-f2-s1
version/junos os evolved/15.1-f2-s2
version/junos os evolved/15.1-f2-s3
version/junos os evolved/15.1-f2-s4
version/junos os evolved/15.1-f3
version/junos os evolved/15.1-f4
version/junos os evolved/15.1-f5
version/junos os evolved/15.1-f5-s7
version/junos os evolved/15.1-f6
version/junos os evolved/15.1-f6-s1
version/junos os evolved/15.1-f6-s10
version/junos os evolved/15.1-f6-s12
version/junos os evolved/15.1-f6-s2
version/junos os evolved/15.1-f6-s3
version/junos os evolved/15.1-f6-s4
version/junos os evolved/15.1-f6-s5
version/junos os evolved/15.1-f6-s6
version/junos os evolved/15.1-f6-s7
version/junos os evolved/15.1-f6-s8
version/junos os evolved/15.1-f6-s9
version/junos os evolved/15.1-f7
version/junos os evolved/15.1-r
version/junos os evolved/15.1-r1
version/junos os evolved/15.1-r2
version/junos os evolved/15.1-r3
version/junos os evolved/15.1-r4
version/junos os evolved/15.1-r4-s7
version/junos os evolved/15.1-r4-s8
version/junos os evolved/15.1-r4-s9
version/junos os evolved/15.1-r5
version/junos os evolved/15.1-r5-s1
version/junos os evolved/15.1-r5-s3
version/junos os evolved/15.1-r5-s5
version/junos os evolved/15.1-r5-s6
version/junos os evolved/15.1-r6
version/junos os evolved/15.1-r6-s1
version/junos os evolved/15.1-r6-s2
version/junos os evolved/15.1-r6-s3
version/junos os evolved/15.1-r6-s4
version/junos os evolved/15.1-r6-s6
version/junos os evolved/15.1-r7
version/junos os evolved/15.1-r7-s1
version/junos os evolved/15.1-r7-s2
version/junos os evolved/15.1-r7-s3
version/junos os evolved/15.1-r7-s4
version/junos os evolved/15.1-r7-s5
version/junos os evolved/15.1-r7-s6
version/junos os evolved/15.1-r7-s7
version/junos os evolved/15.1-r7-s8
version/junos os evolved/15.1-r7-s9
version/junos os evolved/18.3
version/junos os evolved/18.3-r1
version/junos os evolved/18.3-r1-s1
version/junos os evolved/18.3-r1-s2
version/junos os evolved/18.3-r1-s3
version/junos os evolved/18.3-r1-s4
version/junos os evolved/18.3-r1-s5
version/junos os evolved/18.3-r1-s6
version/junos os evolved/18.3-r2
version/junos os evolved/18.3-r2-s1
version/junos os evolved/18.3-r2-s2
version/junos os evolved/18.3-r2-s3
version/junos os evolved/18.3-r2-s4
version/junos os evolved/18.3-r3
version/junos os evolved/18.3-r3-s1
version/junos os evolved/18.3-r3-s2
version/junos os evolved/18.3-r3-s3
version/junos os evolved/18.3-r3-s4
version/junos os evolved/18.4
version/junos os evolved/18.4-r1
version/junos os evolved/18.4-r1-s1
version/junos os evolved/18.4-r1-s2
version/junos os evolved/18.4-r1-s3
version/junos os evolved/18.4-r1-s4
version/junos os evolved/18.4-r1-s5
version/junos os evolved/18.4-r1-s6
version/junos os evolved/18.4-r1-s7
version/junos os evolved/18.4-r2
version/junos os evolved/18.4-r2-s1
version/junos os evolved/18.4-r2-s2
version/junos os evolved/18.4-r2-s3
version/junos os evolved/18.4-r2-s4
version/junos os evolved/18.4-r2-s5
version/junos os evolved/18.4-r2-s6
version/junos os evolved/18.4-r2-s7
version/junos os evolved/18.4-r2-s8
version/junos os evolved/18.4-r3
version/junos os evolved/18.4-r3-s1
version/junos os evolved/18.4-r3-s2
version/junos os evolved/18.4-r3-s3
version/junos os evolved/18.4-r3-s4
version/junos os evolved/18.4-r3-s5
version/junos os evolved/18.4-r3-s6
version/junos os evolved/18.4-r3-s7
version/junos os evolved/18.4-r3-s8
version/junos os evolved/19.1
version/junos os evolved/19.1-r1
version/junos os evolved/19.1-r1-s1
version/junos os evolved/19.1-r1-s2
version/junos os evolved/19.1-r1-s3
version/junos os evolved/19.1-r1-s4
version/junos os evolved/19.1-r1-s5
version/junos os evolved/19.1-r1-s6
version/junos os evolved/19.1-r2
version/junos os evolved/19.1-r2-s1
version/junos os evolved/19.1-r2-s2
version/junos os evolved/19.1-r3
version/junos os evolved/19.1-r3-s1
version/junos os evolved/19.1-r3-s2
version/junos os evolved/19.1-r3-s3
version/junos os evolved/19.1-r3-s4
version/junos os evolved/19.1-r3-s5
version/junos os evolved/19.2
version/junos os evolved/19.2-r1
version/junos os evolved/19.2-r1-s1
version/junos os evolved/19.2-r1-s2
version/junos os evolved/19.2-r1-s3
version/junos os evolved/19.2-r1-s4
version/junos os evolved/19.2-r1-s5
version/junos os evolved/19.2-r1-s6
version/junos os evolved/19.2-r2
version/junos os evolved/19.2-r2-s1
version/junos os evolved/19.2-r3
version/junos os evolved/19.2-r3-s1
version/junos os evolved/19.2-r3-s2
version/junos os evolved/19.3
version/junos os evolved/19.3-r1
version/junos os evolved/19.3-r1-s1
version/junos os evolved/19.3-r2
version/junos os evolved/19.3-r2-s1
version/junos os evolved/19.3-r2-s2
version/junos os evolved/19.3-r2-s3
version/junos os evolved/19.3-r2-s4
version/junos os evolved/19.3-r2-s5
version/junos os evolved/19.3-r3
version/junos os evolved/19.3-r3-s1
version/junos os evolved/19.3-r3-s2
version/junos os evolved/19.4-r1
version/junos os evolved/19.4-r1-s1
version/junos os evolved/19.4-r1-s2
version/junos os evolved/19.4-r1-s3
version/junos os evolved/19.4-r2
version/junos os evolved/19.4-r2-s1
version/junos os evolved/19.4-r2-s2
version/junos os evolved/19.4-r2-s3
version/junos os evolved/19.4-r2-s4
version/junos os evolved/19.4-r3
version/junos os evolved/19.4-r3-s1
version/junos os evolved/19.4-r3-s2
version/junos os evolved/19.4-r3-s3
version/junos os evolved/19.4-r3-s4
version/junos os evolved/20.1-r1
version/junos os evolved/20.1-r1-s1
version/junos os evolved/20.1-r1-s2
version/junos os evolved/20.1-r1-s3
version/junos os evolved/20.1-r1-s4
version/junos os evolved/20.1-r2
version/junos os evolved/20.1-r2-s1
version/junos os evolved/20.1-r3
version/junos os evolved/20.2-r1
version/junos os evolved/20.2-r1-s1
version/junos os evolved/20.2-r1-s2
version/junos os evolved/20.2-r1-s3
version/junos os evolved/20.2-r2
version/junos os evolved/20.2-r2-s1
version/junos os evolved/20.2-r2-s2
version/junos os evolved/20.2-r2-s3
version/junos os evolved/20.2-r3
version/junos os evolved/20.2-r3-s1
version/junos os evolved/20.3-r1
version/junos os evolved/20.3-r1-s1
version/junos os evolved/20.3-r2
version/junos os evolved/20.3-r2-s1
version/junos os evolved/20.4-r1
version/junos os evolved/20.4-r1-s1
version/junos os evolved/20.4-r2
version/junos os evolved/21.1-r1