⚠ Actively exploited
Added to CISA KEV on 2022-03-25. Federal agencies required to patch by 2022-04-15. Required action: Apply updates per vendor instructions..

CVE-2020-1631 — Path Traversal in Networks Junos OS

CWE-22 — Path TraversalCWE-73 — External Control of File Name or Path8 documents8 sources
Severity
9.8CRITICALNVD
CNA8.8VulnCheck8.8
EPSS
5.4%
top 9.86%
CISA KEV
KEV
Added 2022-03-25
Due 2022-04-15
Exploit
Exploited in wild
Active exploitation observed
Affected products
2
Juniper Networks Junos OSJuniper Junos
Timeline
PublishedMay 4
KEV addedMar 25
KEV dueApr 15
Latest updateMay 24
CISA Required Action: Apply updates per vendor instructions.

Description

A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform local file inclusion (LFI) or path traversal. Using this vulnerability, an attacker may be able to inject commands into the httpd.log, read files with 'world' readable permission file or obtain J-Web session tokens. In the case of command injection, as the HTTP servi…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5juniper_networks/junos_os12.3 — 12.3R12-S16+17
▶NVDjuniper/junos18 versions+17

🔴Vulnerability Details

3
GHSA
GHSA-g762-xhjq-x42p: A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirec↗2022-05-24
▶
CVEList
Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services↗2020-05-04
▶
VulnCheck
Juniper Junos OS Path Traversal Vulnerability↗2020
▶

📋Vendor Advisories

2
CISA
Juniper Junos OS Path Traversal Vulnerability↗2022-03-25
▶
Juniper
CVE-2020-1631: A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirec↗2020-05-04
▶

🕵️Threat Intelligence

1
Tenable
CVE-2020-1472: Advanced Persistent Threat Actors Use Zerologon Vulnerability In Exploit Chain with Unpatched Vulnerabilities↗2020-10-12
▶

💬Community

1
Bugzilla
CVE-2018-7263 libmad: Double-free in the mad_decoder_run() function↗2018-02-21
▶
CVE-2020-1631 — Path Traversal in Networks Junos OS | cvebase