CVE-2025-59968

published 2025-10-09

CVE-2025-59968: A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify…

high 7.7 CVSS 4.0

AV N AC L AT N PR N UI N VC N VI L VA N SC N SI H SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU Y R A V C RE M U Green

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface.

Tampering with this metadata can result in managed SRX Series devices permitting network traffic that should otherwise be blocked by policy, effectively bypassing intended security controls.

This issue affects Junos Space Security Director
* all versions prior to 24.1R3 Patch V4

This issue does not affect managed cSRX Series devices.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
juniper	junos_os	—	—
juniper	junos_space	—	—
juniper	space_security_director	< 24.1	24.1
juniper	space_security_director	—	—
juniper	srx_series	—	—
juniper_networks	junos_os	—	—
juniper_networks	junos_space_security_director	< 24.1R3 Patch V4	24.1R3 Patch V4

CWE-862