CVE-2021-31385: Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root

Published Oct 19, 2021

Updated

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in J-Web of Juniper Networks Junos OS allows any low-privileged authenticated attacker to elevate their privileges to root. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S19; 15.1 versions prior to 15.1R7-S10; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R2-S2, 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S1, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2.

Affected Software

211 affected components

Juniper Junos=12.3

Juniper Junos=12.3-r1

Juniper Junos=12.3-r10

Juniper Junos=12.3-r10-s1

Juniper Junos=12.3-r10-s2

Juniper Junos=12.3-r11

Juniper Junos=12.3-r12

Juniper Junos=12.3-r12-s1

Juniper Junos=12.3-r12-s10

Juniper Junos=12.3-r12-s11

Juniper Junos=12.3-r12-s12

Juniper Junos=12.3-r12-s13

Juniper Junos=12.3-r12-s14

Juniper Junos=12.3-r12-s15

Juniper Junos=12.3-r12-s16

Juniper Junos=12.3-r12-s17

Juniper Junos=12.3-r12-s18

Juniper Junos=12.3-r12-s3

Juniper Junos=12.3-r12-s4

Juniper Junos=12.3-r12-s6

Juniper Junos=12.3-r12-s8

Juniper Junos=12.3-r2

Juniper Junos=12.3-r3

Juniper Junos=12.3-r4

Juniper Junos=12.3-r5

Juniper Junos=12.3-r6

Juniper Junos=12.3-r7

Juniper Junos=12.3-r8

Juniper Junos=12.3-r9

Juniper Junos=15.1

Juniper Junos=15.1-a1

Juniper Junos=15.1-f

Juniper Junos=15.1-f1

Juniper Junos=15.1-f2

Juniper Junos=15.1-f2-s1

Juniper Junos=15.1-f2-s2

Juniper Junos=15.1-f2-s3

Juniper Junos=15.1-f2-s4

Juniper Junos=15.1-f3

Juniper Junos=15.1-f4

Juniper Junos=15.1-f5

Juniper Junos=15.1-f5-s7

Juniper Junos=15.1-f6

Juniper Junos=15.1-f6-s1

Juniper Junos=15.1-f6-s10

Juniper Junos=15.1-f6-s12

Juniper Junos=15.1-f6-s2

Juniper Junos=15.1-f6-s3

Juniper Junos=15.1-f6-s4

Juniper Junos=15.1-f6-s5

Juniper Junos=15.1-f6-s6

Juniper Junos=15.1-f6-s7

Juniper Junos=15.1-f6-s8

Juniper Junos=15.1-f6-s9

Juniper Junos=15.1-f7

Juniper Junos=15.1-r

Juniper Junos=15.1-r1

Juniper Junos=15.1-r2

Juniper Junos=15.1-r3

Juniper Junos=15.1-r4

Juniper Junos=15.1-r4-s7

Juniper Junos=15.1-r4-s8

Juniper Junos=15.1-r4-s9

Juniper Junos=15.1-r5

Juniper Junos=15.1-r5-s1

Juniper Junos=15.1-r5-s3

Juniper Junos=15.1-r5-s5

Juniper Junos=15.1-r5-s6

Juniper Junos=15.1-r6

Juniper Junos=15.1-r6-s1

Juniper Junos=15.1-r6-s2

Juniper Junos=15.1-r6-s3

Juniper Junos=15.1-r6-s4

Juniper Junos=15.1-r6-s6

Juniper Junos=15.1-r7

Juniper Junos=15.1-r7-s1

Juniper Junos=15.1-r7-s2

Juniper Junos=15.1-r7-s3

Juniper Junos=15.1-r7-s4

Juniper Junos=15.1-r7-s5

Juniper Junos=15.1-r7-s6

Juniper Junos=15.1-r7-s7

Juniper Junos=15.1-r7-s8

Juniper Junos=15.1-r7-s9

Juniper Junos=18.3

Juniper Junos=18.3-r1

Juniper Junos=18.3-r1-s1

Juniper Junos=18.3-r1-s2

Juniper Junos=18.3-r1-s3

Juniper Junos=18.3-r1-s4

Juniper Junos=18.3-r1-s5

Juniper Junos=18.3-r1-s6

Juniper Junos=18.3-r2

Juniper Junos=18.3-r2-s1

Juniper Junos=18.3-r2-s2

Juniper Junos=18.3-r2-s3

Juniper Junos=18.3-r2-s4

Juniper Junos=18.3-r3

Juniper Junos=18.3-r3-s1

Juniper Junos=18.3-r3-s2

Juniper Junos=18.3-r3-s3

Juniper Junos=18.3-r3-s4

Juniper Junos=18.4

Juniper Junos=18.4-r1

Juniper Junos=18.4-r1-s1

Juniper Junos=18.4-r1-s2

Juniper Junos=18.4-r1-s3

Juniper Junos=18.4-r1-s4

Juniper Junos=18.4-r1-s5

Juniper Junos=18.4-r1-s6

Juniper Junos=18.4-r1-s7

Juniper Junos=18.4-r2

Juniper Junos=18.4-r2-s1

Juniper Junos=18.4-r2-s2

Juniper Junos=18.4-r2-s3

Juniper Junos=18.4-r2-s4

Juniper Junos=18.4-r2-s5

Juniper Junos=18.4-r2-s6

Juniper Junos=18.4-r2-s7

Juniper Junos=18.4-r2-s8

Juniper Junos=18.4-r3

Juniper Junos=18.4-r3-s1

Juniper Junos=18.4-r3-s2

Juniper Junos=18.4-r3-s3

Juniper Junos=18.4-r3-s4

Juniper Junos=18.4-r3-s5

Juniper Junos=18.4-r3-s6

Juniper Junos=18.4-r3-s7

Juniper Junos=18.4-r3-s8

Juniper Junos=19.1

Juniper Junos=19.1-r1

Juniper Junos=19.1-r1-s1

Juniper Junos=19.1-r1-s2

Juniper Junos=19.1-r1-s3

Juniper Junos=19.1-r1-s4

Juniper Junos=19.1-r1-s5

Juniper Junos=19.1-r1-s6

Juniper Junos=19.1-r2

Juniper Junos=19.1-r2-s1

Juniper Junos=19.1-r2-s2

Juniper Junos=19.1-r3

Juniper Junos=19.1-r3-s1

Juniper Junos=19.1-r3-s2

Juniper Junos=19.1-r3-s3

Juniper Junos=19.1-r3-s4

Juniper Junos=19.1-r3-s5

Juniper Junos=19.2

Juniper Junos=19.2-r1

Juniper Junos=19.2-r1-s1

Juniper Junos=19.2-r1-s2

Juniper Junos=19.2-r1-s3

Juniper Junos=19.2-r1-s4

Juniper Junos=19.2-r1-s5

Juniper Junos=19.2-r1-s6

Juniper Junos=19.2-r2

Juniper Junos=19.2-r2-s1

Juniper Junos=19.2-r3

Juniper Junos=19.2-r3-s1

Juniper Junos=19.2-r3-s2

Juniper Junos=19.3

Juniper Junos=19.3-r1

Juniper Junos=19.3-r1-s1

Juniper Junos=19.3-r2

Juniper Junos=19.3-r2-s1

Juniper Junos=19.3-r2-s2

Juniper Junos=19.3-r2-s3

Juniper Junos=19.3-r2-s4

Juniper Junos=19.3-r2-s5

Juniper Junos=19.3-r3

Juniper Junos=19.3-r3-s1

Juniper Junos=19.3-r3-s2

Juniper Junos=19.4-r1

Juniper Junos=19.4-r1-s1

Juniper Junos=19.4-r1-s2

Juniper Junos=19.4-r1-s3

Juniper Junos=19.4-r2

Juniper Junos=19.4-r2-s1

Juniper Junos=19.4-r2-s2

Juniper Junos=19.4-r2-s3

Juniper Junos=19.4-r2-s4

Juniper Junos=19.4-r3

Juniper Junos=19.4-r3-s1

Juniper Junos=19.4-r3-s2

Juniper Junos=19.4-r3-s3

Juniper Junos=19.4-r3-s4

Juniper Junos=20.1-r1

Juniper Junos=20.1-r1-s1

Juniper Junos=20.1-r1-s2

Juniper Junos=20.1-r1-s3

Juniper Junos=20.1-r1-s4

Juniper Junos=20.1-r2

Juniper Junos=20.1-r2-s1

Juniper Junos=20.1-r3

Juniper Junos=20.2-r1

Juniper Junos=20.2-r1-s1

Juniper Junos=20.2-r1-s2

Juniper Junos=20.2-r1-s3

Juniper Junos=20.2-r2

Juniper Junos=20.2-r2-s1

Juniper Junos=20.2-r2-s2

Juniper Junos=20.2-r2-s3

Juniper Junos=20.2-r3

Juniper Junos=20.2-r3-s1

Juniper Junos=20.3-r1

Juniper Junos=20.3-r1-s1

Juniper Junos=20.3-r2

Juniper Junos=20.3-r2-s1

Juniper Junos=20.4-r1

Juniper Junos=20.4-r1-s1

Juniper Junos=20.4-r2

Juniper Junos=21.1-r1

Remediation

Information

The following software releases have been updated to resolve this specific issue: 12.3R12-S19, 15.1R7-S10, 18.3R3-S5, 18.4R3-S9, 19.1R3-S6, 19.2R1-S7, 19.2R3-S3, 19.3R3-S3, 19.4R3-S5, 20.1R2-S2, 20.1R3-S1, 20.2R3-S2, 20.3R3, 20.4R2-S1, 20.4R3, 21.1R1-S1, 21.1R2, 21.2R1, and all subsequent releases.

Event History

Oct 19, 2021

CVE Published

via MITRE·06:17 PM

Data Sourced

via MITRE·06:17 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-31385?

CVE-2021-31385 is rated as high severity due to its potential for privilege escalation.

How do I fix CVE-2021-31385?

To remediate CVE-2021-31385, upgrade to a patched version of Junos OS as specified in the Juniper security advisory.

What systems are affected by CVE-2021-31385?

CVE-2021-31385 affects various versions of Juniper Networks Junos OS, including 12.3, 15.1, 18.3, 18.4, and 19.x versions.

Who can exploit CVE-2021-31385?

CVE-2021-31385 can be exploited by any low-privileged authenticated attacker.

What is the impact of CVE-2021-31385?

The impact of CVE-2021-31385 is the potential elevation of privileges to root on the affected systems.