CVE-2022-22156: Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL

First published: Wed Jan 19 2022(Updated: )

An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrity and confidentiality of the device. The following command can be executed by an administrator via the CLI to refresh a script from a remote location, which is affected from this vulnerability: >request system scripts refresh-from (commit | event | extension-service | op | snmp) file filename url <https-url> This issue affects: Juniper Networks Junos OS All versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2; 21.1 versions prior to 21.1R1-S1, 21.1R2.

Credit: sirt@juniper.net

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/weakness
• agent/severity
• agent/remedy
• agent/author
• agent/title
• agent/references
• agent/last-modified-date
• agent/tags
• agent/description
• agent/first-publish-date
• agent/event
• vendor/juniper
• canonical/juniper junos
• version/juniper junos/18.3
• version/juniper junos/18.4
• version/juniper junos/18.4-r1
• version/juniper junos/18.4-r1-s1
• version/juniper junos/18.4-r1-s2
• version/juniper junos/18.4-r1-s3
• version/juniper junos/18.4-r1-s4
• version/juniper junos/18.4-r1-s5
• version/juniper junos/18.4-r1-s6
• version/juniper junos/18.4-r1-s7
• version/juniper junos/18.4-r2
• version/juniper junos/18.4-r2-s1
• version/juniper junos/18.4-r2-s2
• version/juniper junos/18.4-r2-s3
• version/juniper junos/18.4-r2-s4
• version/juniper junos/18.4-r2-s5
• version/juniper junos/18.4-r2-s6
• version/juniper junos/18.4-r2-s7
• version/juniper junos/18.4-r2-s8
• version/juniper junos/18.4-r3
• version/juniper junos/18.4-r3-s1
• version/juniper junos/18.4-r3-s2
• version/juniper junos/18.4-r3-s3
• version/juniper junos/18.4-r3-s4
• version/juniper junos/18.4-r3-s5
• version/juniper junos/18.4-r3-s6
• version/juniper junos/18.4-r3-s7
• version/juniper junos/18.4-r3-s8
• version/juniper junos/19.1
• version/juniper junos/19.1-r1
• version/juniper junos/19.1-r1-s1
• version/juniper junos/19.1-r1-s2
• version/juniper junos/19.1-r1-s3
• version/juniper junos/19.1-r1-s4
• version/juniper junos/19.1-r1-s5
• version/juniper junos/19.1-r1-s6
• version/juniper junos/19.1-r2
• version/juniper junos/19.1-r2-s1
• version/juniper junos/19.1-r2-s2
• version/juniper junos/19.1-r3
• version/juniper junos/19.1-r3-s1
• version/juniper junos/19.1-r3-s2
• version/juniper junos/19.1-r3-s3
• version/juniper junos/19.1-r3-s4
• version/juniper junos/19.1-r3-s5
• version/juniper junos/19.1-r3-s6
• version/juniper junos/19.2
• version/juniper junos/19.2-r1
• version/juniper junos/19.2-r1-s1
• version/juniper junos/19.2-r1-s2
• version/juniper junos/19.2-r1-s3
• version/juniper junos/19.2-r1-s4
• version/juniper junos/19.2-r1-s5
• version/juniper junos/19.2-r1-s6
• version/juniper junos/19.2-r2
• version/juniper junos/19.2-r2-s1
• version/juniper junos/19.2-r3
• version/juniper junos/19.2-r3-s1
• version/juniper junos/19.2-r3-s2
• version/juniper junos/19.3
• version/juniper junos/19.3-r1
• version/juniper junos/19.3-r1-s1
• version/juniper junos/19.3-r2
• version/juniper junos/19.3-r2-s1
• version/juniper junos/19.3-r2-s2
• version/juniper junos/19.3-r2-s3
• version/juniper junos/19.3-r2-s4
• version/juniper junos/19.3-r2-s5
• version/juniper junos/19.3-r2-s6
• version/juniper junos/19.3-r3
• version/juniper junos/19.3-r3-s1
• version/juniper junos/19.3-r3-s2
• version/juniper junos/19.3-r3-s3
• version/juniper junos/19.4-r1
• version/juniper junos/19.4-r1-s1
• version/juniper junos/19.4-r1-s2
• version/juniper junos/19.4-r1-s3
• version/juniper junos/19.4-r1-s4
• version/juniper junos/19.4-r2
• version/juniper junos/19.4-r2-s1
• version/juniper junos/19.4-r2-s2
• version/juniper junos/19.4-r2-s3
• version/juniper junos/19.4-r2-s4
• version/juniper junos/19.4-r2-s5
• version/juniper junos/19.4-r3
• version/juniper junos/19.4-r3-s1
• version/juniper junos/19.4-r3-s2
• version/juniper junos/19.4-r3-s3
• version/juniper junos/19.4-r3-s4
• version/juniper junos/19.4-r3-s5
• version/juniper junos/19.4-r3-s6
• version/juniper junos/20.1-r1
• version/juniper junos/20.1-r1-s1
• version/juniper junos/20.1-r1-s2
• version/juniper junos/20.1-r1-s3
• version/juniper junos/20.1-r1-s4
• version/juniper junos/20.1-r2
• version/juniper junos/20.1-r2-s1
• version/juniper junos/20.2-r1
• version/juniper junos/20.2-r1-s1
• version/juniper junos/20.2-r1-s2
• version/juniper junos/20.2-r1-s3
• version/juniper junos/20.2-r2
• version/juniper junos/20.2-r2-s1
• version/juniper junos/20.2-r2-s2
• version/juniper junos/20.2-r2-s3
• version/juniper junos/20.3-r1
• version/juniper junos/20.3-r1-s1
• version/juniper junos/20.3-r2
• version/juniper junos/20.4-r1
• version/juniper junos/20.4-r1-s1
• version/juniper junos/21.1-r1