CVE-2021-0231

published 2021-04-22

CVE-2021-0231: A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue…

Priority P3 39 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S3, 20.2R2; This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
juniper	j-web	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	srx_series	—	—
juniper_networks	junos_os	>= 19.3 < 19.3R2-S6, 19.3R3-S1	19.3R2-S6, 19.3R3-S1
juniper_networks	junos_os	>= 19.4 < 19.4R2-S4, 19.4R3	19.4R2-S4, 19.4R3
juniper_networks	junos_os	>= 20.1 < 20.1R1-S4, 20.1R2	20.1R1-S4, 20.1R2
juniper_networks	junos_os	>= 20.2 < 20.2R1-S3, 20.2R2	20.2R1-S3, 20.2R2

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 6.8 MEDIUM AV:N/AC:L/Au:S/C:C/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22