CVE-2024-30381: Paragon Active Assurance: probe_serviced exposes internal objects to local users
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Juniper Networks Paragon Active Assurance Control Center allows a network-adjacent attacker with root access to a Test Agent Appliance the ability to access sensitive information about downstream devices.
The "netrounds-probe-login" daemon (also called probeserviced) exposes functions where the Test Agent (TA) Appliance pushes interface state/config, unregister itself, etc. The remote service accidentally exposes an internal database object that can be used for direct database access on the Paragon Active Assurance Control Center.
This issue affects Paragon Active Assurance: 4.1.0, 4.2.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30381?
The severity of CVE-2024-30381 is classified as High due to the potential unauthorized access to sensitive information.
How do I fix CVE-2024-30381?
To fix CVE-2024-30381, update your Juniper Networks Paragon Active Assurance Control Center to the latest version above 4.2.0.
Who is affected by CVE-2024-30381?
CVE-2024-30381 affects users of Juniper Networks Paragon Active Assurance versions between 4.1.0 and 4.2.0.
What type of information is exposed in CVE-2024-30381?
CVE-2024-30381 exposes sensitive information about downstream devices connected to the network.
Can an attacker exploit CVE-2024-30381 remotely?
No, an attacker needs root access to a Test Agent Appliance to exploit CVE-2024-30381.