CVE-2021-0231

published 2021-04-22

CVE-2021-0231: A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S3, 20.2R2; This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
juniper	j-web	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	srx_series	—	—
juniper_networks	junos_os	>= 19.3 < 19.3R2-S6, 19.3R3-S1	19.3R2-S6, 19.3R3-S1
juniper_networks	junos_os	>= 19.4 < 19.4R2-S4, 19.4R3	19.4R2-S4, 19.4R3
juniper_networks	junos_os	>= 20.1 < 20.1R1-S4, 20.1R2	20.1R1-S4, 20.1R2
juniper_networks	junos_os	>= 20.2 < 20.2R1-S3, 20.2R2	20.2R1-S3, 20.2R2

CWE-22