CVE-2023-44201

published 2023-10-13

CVE-2023-44201: An Incorrect Permission Assignment for Critical Resource vulnerability in a specific file of Juniper Networks Junos OS and Junos OS Evolved allows a local…

Priority P4 28 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C H I N A N

An Incorrect Permission Assignment for Critical Resource vulnerability in a specific file of Juniper Networks Junos OS and Junos OS Evolved allows a local authenticated attacker to read configuration changes without having the permissions.

When a user with the respective permissions commits a configuration change, a specific file is created. That file is readable even by users with no permissions to access the configuration. This can lead to privilege escalation as the user can read the password hash when a password change is being committed.

This issue affects:

Juniper Networks Junos OS

* All versions prior to 20.4R3-S4;
* 21.1 versions prior to 21.1R3-S4;
* 21.2 versions prior to 21.2R3-S2;
* 21.3 versions prior to 21.3R2-S2, 21.3R3-S1;
* 21.4 versions prior to 21.4R2-S1, 21.4R3.

Juniper Networks Junos OS Evolved

* All versions prior to 20.4R3-S4-EVO;
* 21.1 versions prior to 21.1R3-S2-EVO;
* 21.2 versions prior to 21.2R3-S2-EVO;
* 21.3 versions prior to 21.3R3-S1-EVO;
* 21.4 versions prior to 21.4R2-S2-EVO.

Affected

23 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	< 20.4	20.4
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	junos_os_evolved	< 20.4	20.4
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper_networks	junos_os	< 20.4R3-S4	20.4R3-S4
juniper_networks	junos_os	>= 21.1 < 21.1R3-S4	21.1R3-S4
juniper_networks	junos_os	>= 21.2 < 21.2R3-S2	21.2R3-S2
juniper_networks	junos_os	>= 21.3 < 21.3R2-S2, 21.3R3-S1	21.3R2-S2, 21.3R3-S1
juniper_networks	junos_os	>= 21.4 < 21.4R2-S1, 21.4R3	21.4R2-S1, 21.4R3
juniper_networks	junos_os_evolved	< 20.4R3-S4-EVO	20.4R3-S4-EVO
juniper_networks	junos_os_evolved	>= 21.1-EVO < 21.1R3-S2-EVO	21.1R3-S2-EVO
juniper_networks	junos_os_evolved	>= 21.2-EVO < 21.2R3-S2-EVO	21.2R3-S2-EVO
juniper_networks	junos_os_evolved	>= 21.3-EVO < 21.3R3-S1-EVO	21.3R3-S1-EVO
juniper_networks	junos_os_evolved	>= 21.4-EVO < 21.4R2-S2-EVO, 21.4R3-EVO	21.4R2-S2-EVO, 21.4R3-EVO

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-732