First published: Thu Jan 25 2024(Updated: )
A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sensitive Information vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to access sensitive system information. When a user logs in, a temporary file which contains the configuration of the device (as visible to that user) is created in the /cache folder. An unauthenticated attacker can then attempt to access such a file by sending a specific request to the device trying to guess the name of such a file. Successful exploitation will reveal configuration information. This issue affects Juniper Networks Junos OS on SRX Series and EX Series: * All versions earlier than 20.4R3-S9; * 21.2 versions earlier than 21.2R3-S7; * 21.3 versions earlier than 21.3R3-S5; * 21.4 versions earlier than 21.4R3-S6; * 22.1 versions earlier than 22.1R3-S5; * 22.2 versions earlier than 22.2R3-S3; * 22.3 versions earlier than 22.3R3-S2; * 22.4 versions earlier than 22.4R3; * 23.2 versions earlier than 23.2R1-S2, 23.2R2.
Credit: sirt@juniper.net
Affected Software | Affected Version | How to fix |
---|---|---|
Juniper Networks Junos OS | ||
Juniper Networks SRX Series | ||
Juniper Networks EX Series | ||
All of | ||
Any of | ||
Juniper JUNOS | <20.4 | |
Juniper JUNOS | =20.4 | |
Juniper JUNOS | =20.4-r1 | |
Juniper JUNOS | =20.4-r1-s1 | |
Juniper JUNOS | =20.4-r2 | |
Juniper JUNOS | =20.4-r2-s1 | |
Juniper JUNOS | =20.4-r2-s2 | |
Juniper JUNOS | =20.4-r3 | |
Juniper JUNOS | =20.4-r3-s1 | |
Juniper JUNOS | =20.4-r3-s2 | |
Juniper JUNOS | =20.4-r3-s3 | |
Juniper JUNOS | =20.4-r3-s4 | |
Juniper JUNOS | =20.4-r3-s5 | |
Juniper JUNOS | =20.4-r3-s6 | |
Juniper JUNOS | =20.4-r3-s7 | |
Juniper JUNOS | =20.4-r3-s8 | |
Juniper JUNOS | =21.2 | |
Juniper JUNOS | =21.2-r1 | |
Juniper JUNOS | =21.2-r1-s1 | |
Juniper JUNOS | =21.2-r1-s2 | |
Juniper JUNOS | =21.2-r2 | |
Juniper JUNOS | =21.2-r2-s1 | |
Juniper JUNOS | =21.2-r2-s2 | |
Juniper JUNOS | =21.2-r3 | |
Juniper JUNOS | =21.2-r3-s1 | |
Juniper JUNOS | =21.2-r3-s2 | |
Juniper JUNOS | =21.2-r3-s3 | |
Juniper JUNOS | =21.2-r3-s4 | |
Juniper JUNOS | =21.2-r3-s5 | |
Juniper JUNOS | =21.2-r3-s6 | |
Juniper JUNOS | =21.3 | |
Juniper JUNOS | =21.3-r1 | |
Juniper JUNOS | =21.3-r1-s1 | |
Juniper JUNOS | =21.3-r1-s2 | |
Juniper JUNOS | =21.3-r2 | |
Juniper JUNOS | =21.3-r2-s1 | |
Juniper JUNOS | =21.3-r2-s2 | |
Juniper JUNOS | =21.3-r3 | |
Juniper JUNOS | =21.3-r3-s1 | |
Juniper JUNOS | =21.3-r3-s2 | |
Juniper JUNOS | =21.3-r3-s3 | |
Juniper JUNOS | =21.3-r3-s4 | |
Juniper JUNOS | =21.4 | |
Juniper JUNOS | =21.4-r1 | |
Juniper JUNOS | =21.4-r1-s1 | |
Juniper JUNOS | =21.4-r1-s2 | |
Juniper JUNOS | =21.4-r2 | |
Juniper JUNOS | =21.4-r2-s1 | |
Juniper JUNOS | =21.4-r2-s2 | |
Juniper JUNOS | =21.4-r3 | |
Juniper JUNOS | =21.4-r3-s1 | |
Juniper JUNOS | =21.4-r3-s2 | |
Juniper JUNOS | =21.4-r3-s3 | |
Juniper JUNOS | =21.4-r3-s4 | |
Juniper JUNOS | =21.4-r3-s5 | |
Juniper JUNOS | =22.1 | |
Juniper JUNOS | =22.1-r1 | |
Juniper JUNOS | =22.1-r1-s1 | |
Juniper JUNOS | =22.1-r1-s2 | |
Juniper JUNOS | =22.1-r2 | |
Juniper JUNOS | =22.1-r2-s1 | |
Juniper JUNOS | =22.1-r2-s2 | |
Juniper JUNOS | =22.1-r3 | |
Juniper JUNOS | =22.1-r3-s1 | |
Juniper JUNOS | =22.1-r3-s2 | |
Juniper JUNOS | =22.1-r3-s3 | |
Juniper JUNOS | =22.1-r3-s4 | |
Juniper JUNOS | =22.2 | |
Juniper JUNOS | =22.2-r1 | |
Juniper JUNOS | =22.2-r1-s1 | |
Juniper JUNOS | =22.2-r1-s2 | |
Juniper JUNOS | =22.2-r2 | |
Juniper JUNOS | =22.2-r2-s1 | |
Juniper JUNOS | =22.2-r2-s2 | |
Juniper JUNOS | =22.2-r3 | |
Juniper JUNOS | =22.2-r3-s1 | |
Juniper JUNOS | =22.2-r3-s2 | |
Juniper JUNOS | =22.3 | |
Juniper JUNOS | =22.3-r1 | |
Juniper JUNOS | =22.3-r1-s1 | |
Juniper JUNOS | =22.3-r1-s2 | |
Juniper JUNOS | =22.3-r2 | |
Juniper JUNOS | =22.3-r2-s1 | |
Juniper JUNOS | =22.3-r2-s2 | |
Juniper JUNOS | =22.3-r3 | |
Juniper JUNOS | =22.3-r3-s1 | |
Juniper JUNOS | =22.4 | |
Juniper JUNOS | =22.4-r1 | |
Juniper JUNOS | =22.4-r1-s1 | |
Juniper JUNOS | =22.4-r1-s2 | |
Juniper JUNOS | =22.4-r2 | |
Juniper JUNOS | =22.4-r2-s1 | |
Juniper JUNOS | =22.4-r2-s2 | |
Juniper JUNOS | =23.2 | |
Juniper JUNOS | =23.2-r1 | |
Juniper JUNOS | =23.2-r1-s1 | |
Any of | ||
Juniper Ex Redundant Power System | ||
Juniper Ex Rps | ||
Juniper Ex2200 | ||
Juniper Ex2200-c | ||
Juniper Ex2200-vc | ||
Juniper Ex2300 | ||
Juniper Ex2300-24mp | ||
Juniper Ex2300-24p | ||
Juniper Ex2300-24t | ||
Juniper Ex2300-48mp | ||
Juniper Ex2300-48p | ||
Juniper Ex2300-48t | ||
Juniper Ex2300-c | ||
Juniper Ex2300 Multigigabit | ||
Juniper Ex2300m | ||
Juniper Ex3200 | ||
Juniper Ex3300 | ||
Juniper Ex3300-vc | ||
Juniper Ex3400 | ||
Juniper Ex4100 | ||
Juniper Ex4100-f | ||
Juniper Ex4100 Multigigabit | ||
Juniper Ex4200 | ||
Juniper Ex4200-vc | ||
Juniper Ex4300 | ||
Juniper Ex4300-24p | ||
Juniper Ex4300-24p-s | ||
Juniper Ex4300-24t | ||
Juniper Ex4300-24t-s | ||
Juniper Ex4300-32f | ||
Juniper Ex4300-32f-dc | ||
Juniper Ex4300-32f-s | ||
Juniper Ex4300-48mp | ||
Juniper Ex4300-48mp-s | ||
Juniper Ex4300-48p | ||
Juniper Ex4300-48p-s | ||
Juniper Ex4300-48t | ||
Juniper Ex4300-48t-afi | ||
Juniper Ex4300-48t-dc | ||
Juniper Ex4300-48t-dc-afi | ||
Juniper Ex4300-48t-s | ||
Juniper Ex4300-48tafi | ||
Juniper Ex4300-48tdc | ||
Juniper Ex4300-48tdc-afi | ||
Juniper Ex4300-mp | ||
Juniper Ex4300-vc | ||
Juniper Ex4300 Multigigabit | ||
Juniper Ex4300m | ||
Juniper Ex4400 | ||
Juniper Ex4400-24x | ||
Juniper Ex4400 Multigigabit | ||
Juniper Ex4500 | ||
Juniper Ex4500-vc | ||
Juniper Ex4550 | ||
Juniper Ex4550-vc | ||
Juniper Ex4550\/vc | ||
Juniper EX4600 | ||
Juniper Ex4600-vc | ||
Juniper Ex4650 | ||
Juniper Ex6200 | ||
Juniper Ex6210 | ||
Juniper Ex8200 | ||
Juniper Ex8200-vc | ||
Juniper Ex8208 | ||
Juniper Ex8216 | ||
Juniper Ex9200 | ||
Juniper Ex9204 | ||
Juniper Ex9208 | ||
Juniper Ex9214 | ||
Juniper Ex9250 | ||
Juniper Ex9251 | ||
Juniper Ex9253 | ||
Juniper Srx100 | ||
Juniper Srx110 | ||
Juniper Srx1400 | ||
Juniper Srx1500 | ||
Juniper Srx1600 | ||
Juniper Srx210 | ||
Juniper Srx220 | ||
Juniper Srx2300 | ||
Juniper Srx240 | ||
Juniper Srx240h2 | ||
Juniper Srx240m | ||
Juniper Srx300 | ||
Juniper Srx320 | ||
Juniper Srx340 | ||
Juniper Srx3400 | ||
Juniper Srx345 | ||
Juniper Srx3600 | ||
Juniper Srx380 | ||
Juniper Srx4000 | ||
Juniper Srx4100 | ||
Juniper Srx4200 | ||
Juniper Srx4300 | ||
Juniper Srx4600 | ||
Juniper Srx4700 | ||
Juniper Srx5000 | ||
Juniper Srx5400 | ||
Juniper Srx550 | ||
Juniper Srx550 Hm | ||
Juniper Srx550m | ||
Juniper Srx5600 | ||
Juniper Srx5800 | ||
Juniper Srx650 |
The following software releases have been updated to resolve this specific issue: 20.4R3-S9, 21.2R3-S7*, 21.3R3-S5, 21.4R3-S6*, 22.1R3-S5*, 22.2R3-S3*, 22.3R3-S2*, 22.4R2-S2, 22.4R3*, 23.2R1-S2, 23.2R2*, 23.4R1, and all subsequent releases. *Pending Publication
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)